Computers are widely used today by most people. Internet based applications,
like ecommerce or ebanking attracts criminals, who using sophisticated
techniques, tries to introduce malware on the victim computer. But not only
computer users are in risk, also smartphones or smartwatch users, smart cities,
Internet of Things devices, etc. Different techniques has been tested against
malware. Currently, pattern matching is the default approach in antivirus
software. Also, Machine Learning is successfully being used. Continuing this
trend, in this article we propose an anomaly based method using the hardware
performance counters (HPC) available in almost any modern computer
architecture. Because anomaly detection is an unsupervised process, new malware
and APTs can be detected even if they are unknown.