| 摘要 |
PROBLEM TO BE SOLVED: To detect malignant software such as a computer virus. SOLUTION: This file access monitoring device is provided with an application file storage part 14 storing an execution format file (program), a file execution part 24 executing the execution format file stored in the application file storage part 14, and a file access determination part 42 determining whether execution carried out by the file execution part 24 is abnormal one or not. The file access determination part 42 determines that operation such as rewriting of registry stored in a registry storage part 12, rewriting of the program stored in an application file storage part 14, writing of a file to a system file storage part 16, rewriting of the file stored in a system file storage part 16 is abnormal operation by the malignant software. COPYRIGHT: (C)2005,JPO&NCIPI |
