| 摘要 |
<p>A malicious program sensing system considering a code protection technique and a method thereof are provided to confirm whether a malicious code exists in a memory where a corresponding program is executed at the time set right after the program is executed. A sensing control module(100) outputs a control signal for starting the malicious code detection within a memory where an arbitrary program is executed at the time set right after the program is executed. A sensing module(200) stores a list of specific API(Application Program Interface) groups called by the malicious code, and then compares an API, which is called by the executed program according to the control signal, with the stored API group list to detect the malicious code.</p> |
