KR20180084502A - Isp를 사용한 바이러스 사전 탐지 장치 및 방법 - Google Patents

Isp를 사용한 바이러스 사전 탐지 장치 및 방법 Download PDF

Info

Publication number
KR20180084502A
KR20180084502A KR1020170008196A KR20170008196A KR20180084502A KR 20180084502 A KR20180084502 A KR 20180084502A KR 1020170008196 A KR1020170008196 A KR 1020170008196A KR 20170008196 A KR20170008196 A KR 20170008196A KR 20180084502 A KR20180084502 A KR 20180084502A
Authority
KR
South Korea
Prior art keywords
object file
storage unit
file
pattern information
inspection
Prior art date
Application number
KR1020170008196A
Other languages
English (en)
Other versions
KR101896824B1 (ko
Inventor
이재환
김영랑
신지선
Original Assignee
한국항공대학교산학협력단
세종대학교산학협력단
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 한국항공대학교산학협력단, 세종대학교산학협력단 filed Critical 한국항공대학교산학협력단
Priority to KR1020170008196A priority Critical patent/KR101896824B1/ko
Publication of KR20180084502A publication Critical patent/KR20180084502A/ko
Application granted granted Critical
Publication of KR101896824B1 publication Critical patent/KR101896824B1/ko

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55—Detecting local intrusion or implementing counter-measures
    • G06F21/56—Computer malware detection or handling, e.g. anti-virus arrangements
    • G06F21/562—Static detection
    • G06F21/564—Static detection by virus signature recognition
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55—Detecting local intrusion or implementing counter-measures
    • G06F21/552—Detecting local intrusion or implementing counter-measures involving long-term monitoring or reporting
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55—Detecting local intrusion or implementing counter-measures
    • G06F21/56—Computer malware detection or handling, e.g. anti-virus arrangements
    • G06F21/568—Computer malware detection or handling, e.g. anti-virus arrangements eliminating virus, restoring damaged files
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
    • G06F21/6218—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database
    • G06F21/6245—Protecting personal data, e.g. for financial or medical purposes

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Theoretical Computer Science (AREA)
  • Software Systems (AREA)
  • Computer Hardware Design (AREA)
  • General Engineering & Computer Science (AREA)
  • Health & Medical Sciences (AREA)
  • Physics & Mathematics (AREA)
  • General Health & Medical Sciences (AREA)
  • General Physics & Mathematics (AREA)
  • Virology (AREA)
  • Bioethics (AREA)
  • Medical Informatics (AREA)
  • Databases & Information Systems (AREA)
  • Storage Device Security (AREA)
  • Measuring Or Testing Involving Enzymes Or Micro-Organisms (AREA)

Abstract

바이러스 사전 탐지 장치에 관한 것이며, 바이러스 사전 탐지 장치는, 요청된 대상 파일에 대한 사전 검사를 통해 상기 대상 파일이 바이러스 감염 가능성이 있는 의심 파일인 것으로 판단되는 경우, 상기 대상 파일의 패턴 정보를 정밀 검사부로 전달하는 스토리지부, 및 상기 스토리지부로부터 수신한 상기 대상 파일의 패턴 정보에 대하여 서버와의 통신을 통해 상기 서버로부터 획득한 상기 대상 파일의 패턴 정보와 관련된 시그니처 파일을 이용함으로써, 상기 대상 파일의 바이러스 감염 여부에 대한 정밀 검사를 수행하는 정밀 검사부를 포함하되, 상기 사전 검사는, 복수의 악성 파일의 시그니처에 대응하는 전체 시그니처 정보와 상기 대상 파일의 패턴 정보를 비교하여 이루어지고, 상기 전체 시그니처 정보는 상기 스토리지부에 기저장된 정보일 수 있다.
KR1020170008196A 2017-01-17 2017-01-17 Isp를 사용한 바이러스 사전 탐지 장치 및 방법 KR101896824B1 (ko)

Priority Applications (1)

Application Number Priority Date Filing Date Title
KR1020170008196A KR101896824B1 (ko) 2017-01-17 2017-01-17 Isp를 사용한 바이러스 사전 탐지 장치 및 방법

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
KR1020170008196A KR101896824B1 (ko) 2017-01-17 2017-01-17 Isp를 사용한 바이러스 사전 탐지 장치 및 방법

Publications (2)

Publication Number Publication Date
KR20180084502A true KR20180084502A (ko) 2018-07-25
KR101896824B1 KR101896824B1 (ko) 2018-09-10

Family

ID=63058916

Family Applications (1)

Application Number Title Priority Date Filing Date
KR1020170008196A KR101896824B1 (ko) 2017-01-17 2017-01-17 Isp를 사용한 바이러스 사전 탐지 장치 및 방법

Country Status (1)

Country Link
KR (1) KR101896824B1 (ko)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
KR102267564B1 (ko) * 2020-11-16 2021-06-21 주식회사 케이사인 원격 단말기의 능동적 보안 위협 탐지 방법
CN117201193A (zh) * 2023-11-06 2023-12-08 新华三网络信息安全软件有限公司 病毒检测方法、装置、存储介质及电子设备

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20050086520A1 (en) * 2003-08-14 2005-04-21 Sarang Dharmapurikar Method and apparatus for detecting predefined signatures in packet payload using bloom filters
KR20120108561A (ko) * 2011-03-24 2012-10-05 삼성전자주식회사 안티-바이러스 유닛을 포함하는 데이터 저장 장치 및 그것의 동작 방법
KR20130096033A (ko) * 2012-02-21 2013-08-29 주식회사 안랩 컴퓨터 시스템 및 시그니처검증서버
KR20140141801A (ko) * 2013-05-31 2014-12-11 주식회사 안랩 필터를 이용한 클라우드 기반 악성코드 진단장치, 시스템 및 방법

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20050086520A1 (en) * 2003-08-14 2005-04-21 Sarang Dharmapurikar Method and apparatus for detecting predefined signatures in packet payload using bloom filters
KR20120108561A (ko) * 2011-03-24 2012-10-05 삼성전자주식회사 안티-바이러스 유닛을 포함하는 데이터 저장 장치 및 그것의 동작 방법
KR20130096033A (ko) * 2012-02-21 2013-08-29 주식회사 안랩 컴퓨터 시스템 및 시그니처검증서버
KR20140141801A (ko) * 2013-05-31 2014-12-11 주식회사 안랩 필터를 이용한 클라우드 기반 악성코드 진단장치, 시스템 및 방법

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
KR102267564B1 (ko) * 2020-11-16 2021-06-21 주식회사 케이사인 원격 단말기의 능동적 보안 위협 탐지 방법
CN117201193A (zh) * 2023-11-06 2023-12-08 新华三网络信息安全软件有限公司 病毒检测方法、装置、存储介质及电子设备
CN117201193B (zh) * 2023-11-06 2024-01-26 新华三网络信息安全软件有限公司 病毒检测方法、装置、存储介质及电子设备

Also Published As

Publication number Publication date
KR101896824B1 (ko) 2018-09-10

Similar Documents

Publication Publication Date Title
BR112013000567A2 (pt) identificando um software malicioso (malware) polimórfico
WO2014012106A3 (en) Retroactively detecting malicious or undesirable software
WO2015177647A3 (en) Technologies for protecting systems and data to prevent cyber-attacks
US8955120B2 (en) Flexible fingerprint for detection of malware
WO2016204845A3 (en) Wavelet decomposition of software entropy to identify malware
RU2015136264A (ru) Способ ведения базы данных и соответствующий сервер
WO2016183316A8 (en) Automatic threat detection of executable files based on static data analysis
WO2006118896A3 (en) Method and apparatus for detecting the falsification of metadata
MX345979B (es) Localizacion de virus usando aplicación de funcion hash criptografica.
WO2011112474A3 (en) Clean store for operating system and software recovery
RU2015141551A (ru) Способ обнаружения работы вредоносной программы, запущенной с клиента, на сервере
EP2767923A3 (en) Robust malware detector
MX2019006678A (es) Sistema y procedimientos de deteccion de cryptoware.
EP3544250A4 (en) METHOD AND DEVICE FOR DETECTING DOS / DDOS ATTACKS, SERVER AND STORAGE MEDIUM
EP2779531A3 (en) System and method for abstracting network policy from physical interfaces and creating portable network policy
EP2323061A3 (en) Software signature tracking
WO2008115670A3 (en) System and method for identifying content
GB2502715A (en) Malware Detection
WO2015014259A8 (en) Method and device for accelerating anti-virus scanning
JP2013532328A5 (ko)
GB2497366B (en) Phishing processing method and system and computer readable storage medium applying the method
JP2012501009A5 (ko)
JP2015508549A5 (ja) モバイル環境用のトロイの木馬化されたアプリケーション（アプリ）を特定するためのコンピュータ実装方法、非一時コンピュータ読み取り可能な媒体およびコンピュータシステム
PH12017550112A1 (en) Techniques to manage bookmarks for media files
WO2019228574A3 (en) Log-structured storage systems

Legal Events

Date Code Title Description
A201 Request for examination
E902 Notification of reason for refusal
E701 Decision to grant or registration of patent right
GRNT Written decision to grant