发明名称 COMPUTING DEVICE EXECUTING MALICIOUS CODE WITH USING ACTUAL RESOURCES, SERVER SYSTEM MANAGING INFORMATION OF MALICIOUS CODE, AND ELECTRONIC SYSTEM INCLUDING THE SAME
摘要 According to the present invention, provided is an electronic system comprising: a malicious code management server which manages information about one or more malicious codes; and one or more host devices each of which executes at least one of the one or more malicious codes. Each of the host devices comprises: a malicious code executer which executes an analysis-target malicious code provided by the malicious code management server; a host information collector which collects information about operations performed during execution of the analysis-target malicious code; a host state restorer which restores the corresponding host device to an operation state before the execution of the analysis-target malicious code; and a processor which controls operations of the malicious code executer, the host information collector, and the host state restorer. The malicious code executer executes the analysis-target malicious code in accordance with a command set structure, processed by the processor, by using actual resources of the host device. According to the present invention, information about a malicious code bypassing a virtual machine can be collected.
申请公布号 KR20160100626(A) 申请公布日期 2016.08.24
申请号 KR20150023306 申请日期 2015.02.16
申请人 ELECTRONICS AND TELECOMMUNICATIONS RESEARCH INSTITUTE 发明人 KIM, YOUNG SOO;KIM, IK KYUN
分类号 H04L29/06;G06F21/56 主分类号 H04L29/06
代理机构 代理人
主权项
地址