METHOD AND SYSTEM FOR PREVENTING INSTALLATION OF PROGRAM

摘要

An installation prevention method and apparatus of a program are provided to monitor file I/O generated from an OS through a filter driver on a real time basis, thereby forbidding writing on the file of an execution file format. File I/O(Input/Output) is generated from an OS(Operating System)(S11). File I/O including a write command among the file I/O generated from the OS is selected(S12). The file data of the selected file I/O is analyzed. It is determined whether the file data is an execution file designated by the OS(S14,S15). In case the file data is the execution file, the write command of the file I/O is canceled(S16).