发明名称 |
COMPUTING DEVICE EXECUTING MALICIOUS CODE WITH USING ACTUAL RESOURCES, SERVER SYSTEM MANAGING INFORMATION OF MALICIOUS CODE, AND ELECTRONIC SYSTEM INCLUDING THE SAME |
摘要 |
According to the present invention, provided is an electronic system comprising: a malicious code management server which manages information about one or more malicious codes; and one or more host devices each of which executes at least one of the one or more malicious codes. Each of the host devices comprises: a malicious code executer which executes an analysis-target malicious code provided by the malicious code management server; a host information collector which collects information about operations performed during execution of the analysis-target malicious code; a host state restorer which restores the corresponding host device to an operation state before the execution of the analysis-target malicious code; and a processor which controls operations of the malicious code executer, the host information collector, and the host state restorer. The malicious code executer executes the analysis-target malicious code in accordance with a command set structure, processed by the processor, by using actual resources of the host device. According to the present invention, information about a malicious code bypassing a virtual machine can be collected. |
申请公布号 |
KR20160100626(A) |
申请公布日期 |
2016.08.24 |
申请号 |
KR20150023306 |
申请日期 |
2015.02.16 |
申请人 |
ELECTRONICS AND TELECOMMUNICATIONS RESEARCH INSTITUTE |
发明人 |
KIM, YOUNG SOO;KIM, IK KYUN |
分类号 |
H04L29/06;G06F21/56 |
主分类号 |
H04L29/06 |
代理机构 |
|
代理人 |
|
主权项 |
|
地址 |
|