| 摘要 |
A device for blocking malicious code using executable files comprises: a database which stores an original DNA value for each executable file stored in an agent system; a blocking unit which sets a blocking mode for blocking movement, alteration or generation of the executable files, and, in the blocking mode, backs up an original before any executable file in the agent system is altered if any executable file is being altered; and a file execution unit which, if there is an execution request for a specific executable file in the agent system, compares the DNA value of the specific executable file with the original DNA value of the specific executable file stored on the database and thereby determines whether to execute the specific executable file, and which restores and executes the backed-up original if the specific executable file is any such altered executable file. |
