WO2012023809A3 - 훅 재진입 방지 장치 및 그 방법을 컴퓨터에서 실행시키기 위한 프로그램을 기록한 기록매체 - Google Patents

훅 재진입 방지 장치 및 그 방법을 컴퓨터에서 실행시키기 위한 프로그램을 기록한 기록매체 Download PDF

Info

Publication number
WO2012023809A3
WO2012023809A3 PCT/KR2011/006062 KR2011006062W WO2012023809A3 WO 2012023809 A3 WO2012023809 A3 WO 2012023809A3 KR 2011006062 W KR2011006062 W KR 2011006062W WO 2012023809 A3 WO2012023809 A3 WO 2012023809A3
Authority
WO
WIPO (PCT)
Prior art keywords
hook
layer
function
entry
recorded
Prior art date
Application number
PCT/KR2011/006062
Other languages
English (en)
French (fr)
Other versions
WO2012023809A2 (ko
Inventor
이형주
Original Assignee
주식회사 파수닷컴
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 주식회사 파수닷컴 filed Critical 주식회사 파수닷컴
Priority to EP20110818409 priority Critical patent/EP2608021A4/en
Priority to US13/818,054 priority patent/US9098356B2/en
Priority to JP2013524794A priority patent/JP5579934B2/ja
Publication of WO2012023809A2 publication Critical patent/WO2012023809A2/ko
Publication of WO2012023809A3 publication Critical patent/WO2012023809A3/ko

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00—Arrangements for program control, e.g. control units
    • G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/44—Arrangements for executing specific programs
    • G06F9/448—Execution paradigms, e.g. implementations of programming paradigms
    • G06F9/4482—Procedural
    • G06F9/4484—Executing subprograms
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00—Error detection; Error correction; Monitoring
    • G06F11/30—Monitoring
    • G06F11/3003—Monitoring arrangements specially adapted to the computing system or computing system component being monitored
    • G06F11/302—Monitoring arrangements specially adapted to the computing system or computing system component being monitored where the computing system component is a software system
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00—Arrangements for program control, e.g. control units
    • G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/46—Multiprogramming arrangements
    • G06F9/54—Interprogram communication
    • G06F9/541—Interprogram communication via adapters, e.g. between incompatible applications
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00—Arrangements for program control, e.g. control units
    • G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/46—Multiprogramming arrangements
    • G06F9/54—Interprogram communication
    • G06F9/545—Interprogram communication where tasks reside in different layers, e.g. user- and kernel-space
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00—Error detection; Error correction; Monitoring
    • G06F11/30—Monitoring
    • G06F11/3003—Monitoring arrangements specially adapted to the computing system or computing system component being monitored
    • G06F11/3017—Monitoring arrangements specially adapted to the computing system or computing system component being monitored where the computing system is implementing multitasking
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00—Error detection; Error correction; Monitoring
    • G06F11/30—Monitoring
    • G06F11/3089—Monitoring arrangements determined by the means or processing involved in sensing the monitored data, e.g. interfaces, connectors, sensors, probes, agents
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2209/00—Indexing scheme relating to G06F9/00
    • G06F2209/54—Indexing scheme relating to G06F9/54
    • G06F2209/542—Intercept

Abstract

훅 재진입 방지 장치 및 그 방법을 컴퓨터에서 실행시키기 위한 프로그램을 기록한 기록매체가 개시된다. 상태정보 관리 모듈은 훅 함수의 호출여부를 나타내는 상태정보 플래그를 설정하거나 해제한다. 재진입 방지 모듈은 훅 함수의 호출시 상태정보 플래그가 설정되어 있으면 훅 함수의 호출이 훅 레이어의 내부로부터 이루어진 것으로 판단하여 시스템 레이어로 값을 반환한다. 본 발명에 따르면, 훅 레이어와는 독립적인 진입/이탈 레이어로 기능함으로써 훅 레이어를 훅으로부터 안전하게 격리시킬 수 있게 되어 동적 API 후킹 시 훅 레이어 내의 훅 루틴의 수행과정에서 하위 함수의 원본 함수 재호출에 따른 훅 재진입을 방지할 있다.
PCT/KR2011/006062 2010-08-20 2011-08-18 훅 재진입 방지 장치 및 그 방법을 컴퓨터에서 실행시키기 위한 프로그램을 기록한 기록매체 WO2012023809A2 (ko)

Priority Applications (3)

Application Number Priority Date Filing Date Title
EP20110818409 EP2608021A4 (en) 2010-08-20 2011-08-18 DEVICE FOR PREVENTING A RECONNECTING AND RECORDING MEDIUM WITH A PROGRAM RECORDED THEREFOR FOR PERFORMING A CORRESPONDING METHOD ON A COMPUTER
US13/818,054 US9098356B2 (en) 2010-08-20 2011-08-18 Hook re-entry prevention device and recording medium, in which program for executing method thereof in computer is recorded thereon
JP2013524794A JP5579934B2 (ja) 2010-08-20 2011-08-18 フック再進入防止装置及びその方法をコンピュータで実行させるためのプログラムを記録した記録媒体

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
KR10-2010-0080926 2010-08-20
KR20100080926A KR101052586B1 (ko) 2010-08-20 2010-08-20 훅 재진입 방지 장치 및 그 방법을 컴퓨터에서 실행시키기 위한 프로그램을 기록한 기록매체

Publications (2)

Publication Number Publication Date
WO2012023809A2 WO2012023809A2 (ko) 2012-02-23
WO2012023809A3 true WO2012023809A3 (ko) 2012-05-10

Family

ID=44924192

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/KR2011/006062 WO2012023809A2 (ko) 2010-08-20 2011-08-18 훅 재진입 방지 장치 및 그 방법을 컴퓨터에서 실행시키기 위한 프로그램을 기록한 기록매체

Country Status (5)

Country Link
US (1) US9098356B2 (ko)
EP (1) EP2608021A4 (ko)
JP (1) JP5579934B2 (ko)
KR (1) KR101052586B1 (ko)
WO (1) WO2012023809A2 (ko)

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20220363277A1 (en) * 2021-05-13 2022-11-17 Dana Belgium N.V. Driveline component control and fault diagnostics

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20080016339A1 (en) * 2006-06-29 2008-01-17 Jayant Shukla Application Sandbox to Detect, Remove, and Prevent Malware
US20080059676A1 (en) * 2006-08-31 2008-03-06 Charles Jens Archer Efficient deferred interrupt handling in a parallel computing environment
US20100050257A1 (en) * 2006-11-07 2010-02-25 Kyung Sub Jin Confirmation method of api by the information at call-stack
US20100107014A1 (en) * 2008-10-29 2010-04-29 Aternity Inc. Real time monitoring of computer for determining speed of various processes

Family Cites Families (13)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9048A (en) * 1852-06-22 Heat-radiator
JPH06332720A (ja) * 1993-05-20 1994-12-02 Hitachi Ltd シグナル制御方法
US6148325A (en) * 1994-06-30 2000-11-14 Microsoft Corporation Method and system for protecting shared code and data in a multitasking operating system
US5974549A (en) * 1997-03-27 1999-10-26 Soliton Ltd. Security monitor
IL132916A (en) * 1999-11-14 2004-02-08 Mcafee Inc Method and system for intercepting an application program interface
GB0011020D0 (en) 2000-05-09 2000-06-28 Ibm Intercepting system API calls
US6874149B1 (en) * 2000-06-28 2005-03-29 Microsoft Corporation Hooking of replacement and augmented API functions
US7426737B2 (en) * 2004-01-26 2008-09-16 Lucent Technologies Inc. Method and apparatus for operating an open API network having a proxy
US7607173B1 (en) * 2005-10-31 2009-10-20 Symantec Corporation Method and apparatus for preventing rootkit installation
US20070261044A1 (en) 2006-05-04 2007-11-08 Jonathan Clark Chained Hook Function Serving Multiple Versions Of Identically Named Dynamically Loaded Libraries
US8793662B2 (en) 2008-03-25 2014-07-29 Microsoft Corporation Runtime code hooking for print driver and functionality testing
JP5404030B2 (ja) * 2008-12-26 2014-01-29 デジタルア−ツ株式会社 電子ファイル送信方法
MX2012010241A (es) 2010-04-21 2012-10-10 Nestec Sa Extracto de cafe que comprende un ion multivalente.

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20080016339A1 (en) * 2006-06-29 2008-01-17 Jayant Shukla Application Sandbox to Detect, Remove, and Prevent Malware
US20080059676A1 (en) * 2006-08-31 2008-03-06 Charles Jens Archer Efficient deferred interrupt handling in a parallel computing environment
US20100050257A1 (en) * 2006-11-07 2010-02-25 Kyung Sub Jin Confirmation method of api by the information at call-stack
US20100107014A1 (en) * 2008-10-29 2010-04-29 Aternity Inc. Real time monitoring of computer for determining speed of various processes

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See also references of EP2608021A4 *

Also Published As

Publication number Publication date
EP2608021A2 (en) 2013-06-26
EP2608021A4 (en) 2014-03-19
JP5579934B2 (ja) 2014-08-27
WO2012023809A2 (ko) 2012-02-23
JP2013534346A (ja) 2013-09-02
KR101052586B1 (ko) 2011-07-29
US20130160033A1 (en) 2013-06-20
US9098356B2 (en) 2015-08-04

Similar Documents

Publication Publication Date Title
WO2012082442A3 (en) Real-time interaction with entertainment content
WO2011146917A3 (en) Apparatuses, systems and methods for determining installed software applications on a computing device
WO2007130354A3 (en) Methods and apparatus providing computer and network security for polymorphic attacks
WO2013184811A3 (en) Automatically generating a crop insurance policy
WO2013172898A3 (en) System for detecting, analyzing, and controlling infiltration of computer and network systems
WO2011085387A3 (en) Integrated data processing and transcription service
WO2009139994A3 (en) Systems and methods for remote tracking and replay of user interaction with a webpage
WO2008103778A3 (en) Password protection system and method
MX2019009074A (es) Sistema de valoracion de evento de manejo.
MX2012001371A (es) Metodos y sistemas para asociar y proporcionar contenido de medios de diferentes tipos que comparten atributos.
WO2012087582A3 (en) Secure and private location
WO2011001371A3 (en) Method for remotely controlling and monitoring the data produced on desktop on desktop software
WO2010008232A3 (ko) 실감 효과 표현 방법 및 그 장치 및 실감 효과 메타데이터가 기록된 컴퓨터로 읽을 수 있는 기록 매체
WO2012006015A3 (en) Protecting video content using virtualization
WO2012012142A3 (en) Data access during data recovery
TW200943188A (en) A method for automatically detecting an operating system on a USB device
WO2012044685A3 (en) Optimized recovery
WO2011044454A3 (en) Automatic run-time identification of textures
WO2014047049A3 (en) Data protection through power loss prediction
WO2012014153A3 (en) Systems, methods, and devices for wind-responsive operation of sun-tracking assemblies
EP3895111A4 (en) SYSTEM AND PROCEDURES FOR SECURELY STORING AND RETRIEVING SENSITIVE DATA
WO2013052492A3 (en) Hiding boot latency from system users
WO2014042474A3 (en) Method and system for executing application, and device and recording medium thereof
EP2608100A4 (en) Clipboard protection system in drm environment and recording medium in which program for executing method in computer is recorded
WO2014070824A3 (en) Use of video to manage process quality

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 11818409

Country of ref document: EP

Kind code of ref document: A2

ENP Entry into the national phase

Ref document number: 2013524794

Country of ref document: JP

Kind code of ref document: A

NENP Non-entry into the national phase

Ref country code: DE

WWE Wipo information: entry into national phase

Ref document number: 13818054

Country of ref document: US

REEP Request for entry into the european phase

Ref document number: 2011818409

Country of ref document: EP

WWE Wipo information: entry into national phase

Ref document number: 2011818409

Country of ref document: EP