| 摘要 |
PURPOSE: A system for preventing proliferation of a zombi PC by monitoring a process using a network and a method thereof are provided to trace all processes using a designated network driver and a system network driver, thereby fundamentally preventing a malicious process. CONSTITUTION: A session hooking controller(330) hooks a session request. An interface hooking controller(320) hooks an interface request. If the packet information of the interface request is the same as packet information of the session request, a malicious process decision unit(340) traces a request process based on a control list DB(410). If the request process is a malicious process, the malicious process decision unit stops the request process.
|
