| 摘要 |
PROBLEM TO BE SOLVED: To provide a system for preventing even any suspicious operation that damages a host system.SOLUTION: A system 200 for a behavior sandbox comprises a network and a computer. The computer is connected communicably to the network and includes a behavior analysis module 230 and a plurality of execution environments. The behavior analysis module 230 is configured so as to make an executable application downloaded from the network execute a behavior analysis. The plurality of execution environments comprise a standard execution environment 210 and a protected execution environment (sandbox execution environment) 220. The behavior analysis module 230 evaluates a plurality of behavior features of the executable application in order to determine whether or not to be able to execute the executable application within the protected execution environment 220 prior to execution of the executable application. The behavior analysis module 230 monitors the execution of the executable application in order to determine whether or not to be able to change the execution environments. |
