SYSTEM AND METHOD FOR COLLECTING A MALICIOUS SCRIPT BEHAVIOR INFORMATION BASED ON HTML5

摘要

Provided are a system and a method for collecting behavior information of a malicious script based on a hyper text markup language 5 (HTML5), improved in a discrimination speed and discrimination accuracy of the malicious script. The system for collecting the behavior information of the malicious script based on the HTML5 includes: a behavior information collecting part provided with an analysis target URL for extracting and storing the behavior information by executing an analysis target webpage linked to the analysis target URL on a virtual browser; a system management part for checking an operation state of the behavior information collecting part to determine an operation start and an operation end of the behavior information collecting part, and providing the analysis target URL to the behavior information collecting part; and a behavior information management part provided with a behavior information node from the behavior information collecting part to add a third field by using a first field and a second field, and generating a behavior information node tree by using a correlation between a plurality of the behavior information nodes.