METHOD FOR ANALYZING/INTERPRETING MALICIOUS ENCRYPTED SCRIPT TO DEAL WITH NEW ENCRYPTED TECHNIQUE

摘要

PURPOSE: A method for analyzing/interpreting a malicious encrypted script is provided to found an accurate classification system including the techniques to be appeared in future as well as the current encryption technique and flexibly meet the appearance of a new encryption technique through an analytical approach to a script encryption technique. CONSTITUTION: A call expression and a function definition for an independent function are extracted(S410). The extracted call expression/function definition for the independent function are executed or emulated(S420). A decrypted script is obtained by replacing an original script placing an original expression with a result value according to execution or emulation(S440).