| 摘要 |
PURPOSE: A file flow control device using a call stack in a kernel mode, a method thereof, and a program recording medium thereof are provided to use call stack information in the kernel mode, thereby effectively controlling a file flow generated in various applications. CONSTITUTION: A call stack extraction unit(210) extracts function call information, which is generated by an object application, from a call stack. A file flow control unit(220) controls a file flow by analyzing the function call information of the object application. A function call information analysis unit(221) determines whether or not the function call information of the object application is generated when a user performs a file input/output operation in the application. When file input/output function information is generated when a user performs the file input/output operation, a block object determination unit(222) determines whether or not the file is a block object file. A call stack database(230) stores pattern information for function call which is stored in the call stack when the file input/output operation is performed. [Reference numerals] (210) Call stack extraction unit; (221) Function call information analysis unit; (222) Block object determination unit; (223) File blocking unit; (230) Call stack DB;
|
