1. A method comprising: maintaining a database including indicia of valid execution parameters associated with one or more computer processes executable by a computing platform; obtaining execution statistics associated with execution of the one or more computer processes by the computing platform; comparing the execution statistics to the valid execution parameters to detect abnormalities indicative of possible security intrusions.