发明名称 EXPLOIT-CODE EXECUTION PRE-PROTECTION METHOD AND DEVICE THEREOF
摘要 The present invention relates to an exploit code execution pre-protection method and a device thereof. The embodiments of the present invention previously detect and block the execution of an exploit code based on a specific execution pattern included in an exploit code performing an attack using vulnerabilities in various software programs. [Reference numerals] (AA) Start; (BB) Yes(memory block 1); (CC) End; (S100) Perform a software program; (S110) Detect by each memory block using the software program; (S120) Memory block in which a memory allocation size is varied to be an allowed size or greater; (S130) Check the presence of an NOP code set in a memory block 1; (S140) Replace the NOP code set into a protective code; (S150) Call the protective code replaced instead of the NOP code set in a software performing process; (S160) Stop to perform the software program, alarm; (S170) Normal performance of the software program
申请公布号 KR20140012482(A) 申请公布日期 2014.02.03
申请号 KR20120079468 申请日期 2012.07.20
申请人 AHNLAB, INC. 发明人 JANG, SANG KEUN;MOON, YOUNG JO
分类号 G06F21/00;G06F11/30 主分类号 G06F21/00
代理机构 代理人
主权项
地址