SYSTEM AND METHOD FOR DETECTING MALICIOUS CODE USING BLOOM FILTER

摘要

PURPOSE: A malicious code detection system and method using the bloom filter are provided to easily confirm a new malicious code improving an existing malicious code and confirm information that the new malicious code is the variation of any malicious code. CONSTITUTION: A malicious code analyzer(110) divides a malicious code into a function unit. The malicious code analyzer applies a bloom filter to each of the divided malicious code. The malicious code analyzer extracts the filter value of the function-unit malicious code. A malicious code detector(130) extracts a filter value from an unidentified sample. The malicious code detector compares the filter value of the function-unit malicious code and the filter value of the unidentified sample. The malicious code detector detects whether a malicious code is included in the unidentified sample.