A SYSTEM FOR SORTING MALICIOUS CODE BASED ON THE BEHAVIOR AND A METHOD THEREOF

摘要

The present invention relates to a system for sorting a malicious code based on a behavior and a method thereof and, more particularly, to a system for sorting a malicious code based on a behavior and a method thereof, capable of measuring the risk score of the behavior by analyzing a parameter and API called in the execution of a file which is an analysis object and calculating the risk of the file by summing up the risk scores. According to the present invention, a malicious code detection error is reduced and an unknown malicious code is efficiently detected by analyzing the behavior based on parameter and API information called in the execution of the file.