MALICIOUS CODE INFECTION SYSTEM AND MALICIOUS CODE INFECTION METHOD

摘要

Provided are a malicious code diagnosing system and a method of diagnosing malicious codes. According to embodiments of the present disclosure, a malicious code diagnosing operation is performed only on files that are likely to be infected by malicious codes by utilizing file change log information recorded in a file system. Accordingly, malicious code diagnosing operation can be performed more quickly and reliably than conventional diagnosing method.

主权项

1. A method of diagnosing malicious codes, the method comprising:
a file change log information checking operation for checking file change log information recorded in a file system in a computer system when a malicious code diagnosing operation is performed on the computer system; a diagnosis target file list generating operation for generating a diagnosis target file list regarding files corresponding to modification events from among all files of the file system based on the file change log information; and a diagnosing operation for performing the malicious code diagnosing operation only on files included in the diagnosis target file list.