| 摘要 |
Disclosed are a device for classifying execution files using compiler data similarity and a method thereof. According to the present invention, the device for classifying execution files using compiler data similarity includes: a compiler data acquisition unit which acquires classification-target compiler data from the header of a classification-target execution file; and a similarity calculation unit which calculates a similarity value between sample compiler data of each execution file group and the classification-target compiler data, thereby classifying the classification-target execution file by determining to which execution file group the classification-target execution file belongs using the similarity value. |
