摘要 |
PROBLEM TO BE SOLVED: To improve efficiency of analysis.SOLUTION: A virtual machine 10 sets taint tags which are different from each other to respective entries of EAT. After the taint tags are set, the virtual machine 10 executes a program to be analyzed and transmits the taint tags to an execution result of the program to be analyzed to set the taint tags to a memory storing a piece of address information of an API. Subsequently, the virtual machine 10 identifies the storage position storing the API by using the set taint tags after the program to be analyzed has been executed for a predetermined period of time. |