| 摘要 |
PURPOSE: A malicious thread execution blocking device and a method thereof are provided to protect a system from execution of a malicious program by terminating the execution of a thread. CONSTITUTION: Database(111) stores feature information about a malicious thread. An information generating unit(112) generates the thread which is executed in a kernel mode. A determining unit(113) compares the thread information with the feature information about the malicious thread. A terminating unit(114) terminates execution of the malicious thread. |
