APPARATUS AND METHOD FOR AUTOMATICALLY DETECTING MALICIOUS LINKS

摘要

Disclosed are an apparatus and a method for automatically and rapidly collecting a malicious link used for disseminating a malicious code from a homepage, and tracking a real-time changed phase of the malicious link. According to the present invention, the apparatus comprises: a threat information collecting unit for collecting the disclosed threat information related to an inspection site, and identifying the presence of the malicious link by the inspection site; a priority management unit for determining the priority of the inspection site, and allocating and managing the inspection site to collect and analyze the malicious link; a malicious link collection unit for collecting a URL of the malicious link from the inspection site; a malicious link analysis unit for analyzing invocation correlation based on the collected URL of the malicious link and performing a pattern matching to analyze the malicious link; and a malicious link tracking unit for tracking the real-time changed phase of the analyzed malicious link.