发明名称 |
INFORMATION PROCESSING DEVICE, AND INFORMATION PROCESSING METHOD |
摘要 |
The present invention monitors a behavior of malware (program), and generates a log which associates identification information of an invoked library function, input data to the library function, output data from the library function and a taint tag for uniquely specifying output data every time the program invokes a library function. Further, the present invention refers to a taint tag set to output data from an information processing device and a log, tracks a dependent relationship between items of data input and output to and from libraries and specifies a library function which has generated the output data from the information processing device. |
申请公布号 |
EP2988242(A1) |
申请公布日期 |
2016.02.24 |
申请号 |
EP20140797772 |
申请日期 |
2014.03.27 |
申请人 |
NIPPON TELEGRAPH AND TELEPHONE CORPORATION |
发明人 |
KAWAKOYA, YUHEI;IWAMURA, MAKOTO;HARIU, TAKEO |
分类号 |
G06F21/56;G06F9/455;G06F21/52;G06F21/55;H04L29/06 |
主分类号 |
G06F21/56 |
代理机构 |
|
代理人 |
|
主权项 |
|
地址 |
|