Network access control system and method

摘要

The present invention relates to a system and method for controlling a network access of a network packet on the basis of a thread which is inserted into a process through code injection. The network access control system according to the present invention comprises: a process inspecting unit for detecting a code injection-based thread included in a process; and a network monitoring unit for performing network filtering so as to detect a network packet having access to a network, and, if a communication subject of the detected network packet is the code injection-based thread, blocking the traffic of the detected network packet.

主权项

1. A network access control system, comprising:
a process inspection unit and a network inspection unit, the process inspection unit comprising:
a process information collection unit configured to collect information about one or more processes being executed on a computer,a code injection detection unit configured to detect a code-injected area in the processes collected by the process information collection unit, anda thread detection unit configured to detect a thread generated based on the code-injected area to collect the code injection based-thread information, the network inspection unit comprising:
a filter unit configured to filter the network packet, anda network blocking unit configured to block the traffic of the network packet if the agent of communication of the network packet is the code injection based-thread.