INFORMATION PROCESSING DEVICE AND INFORMATION PROCESSING METHOD

摘要

Provided is an information processing device (100A) that, in order to improve the responsiveness of system call processing without compromising safety, comprises: an application specification unit (1511) that specifies programs being executed by the information processing device, by obtaining application identifiers; a call source specification unit (1523) that specifies a call source that indicates which part of a program a program code was called from, when a program code is called by a specified program; a check application management unit (1500) that manages check results, which is data that includes the results of past checks of safety relating to the execution of a specified program; and an attack check judgment unit (1510) that judges whether or not to perform a check to see if the specified program is being attacked, based on the specified check source and the check results.