1. A method of monitoring behaviors of a computing device that includes heterogeneous processing cores, comprising: observing in a non-master processing core of the computing device a portion of a behavior that is relevant to the non-master processing core; generating in the non-master processing core a behavior signature that describes the observed portion of the behavior; and generating a global behavior vector in a master processing core of the computing device by combining two or more behavior signatures generated in non-master processing cores.