摘要 |
<p>PURPOSE: A method and an apparatus for detecting and protecting keylogger using a state register of a keyboard and a computer readable medium storing a program for the method thereof are provided to inform the possibility of the existence of a keylogger by detecting the existence of a port-polling keylogger. CONSTITUTION: A keylogger detection/protection apparatus monitors a C/D flag of a state register(S310), and the device registers an interrupt handler if the same value is repeated over a certain preset frequency in the C/D flag(S320,S330). When the main access agent for a port is not a safe subject, the subject is judged as the keylogger for the analysis of the C/D flag. The device changes the C/D flag value(S360), and removes the useful information for the keylogger(S370).</p> |