A software behavior modeling apparatus includes: a stack information recording unit, a termination information recording unit, a stack difference information generating unit configured to generate, as stack difference information, information formed by combining information being located from an uppermost stack frame until the termination information is detected, by using the termination information recorded by the termination information recording unit, and a model generating unit configured to generate a software behavior model based on the stack difference information.
展开▼