1. A method, comprising: monitoring current operating parameters for a computing system running one or more application; obtaining baseline operating parameters for the computing system running the one or more application in the absence of malware; identifying a deviation between the current operating parameters and the baseline operating parameters; and determining whether the identified deviation matches a deviation associated with a predetermined malware definition.