Title:
An information processor and an information processing method
Document Type and Number:
Japanese Patent JP6023317
Kind Code:
B2
Abstract:
The present invention monitors a behavior of malware (program), and generates a log which associates identification information of an invoked library function, input data to the library function, output data from the library function and a taint tag for uniquely specifying output data every time the program invokes a library function. Further, the present invention refers to a taint tag set to output data from an information processing device and a log, tracks a dependent relationship between items of data input and output to and from libraries and specifies a library function which has generated the output data from the information processing device.
Inventors:
Yuhei Kawafuru
Makoto Iwamura
Takeo Hariu
Makoto Iwamura
Takeo Hariu
Application Number:
JP2015516986A
Publication Date:
November 09, 2016
Filing Date:
March 27, 2014
Export Citation:
Assignee:
Nippon Telegraph and Telephone Corporation
International Classes:
G06F21/56
Foreign References:
| US20110145918A1 | 2011-06-16 | |||
| CN102521543A | 2012-06-27 | |||
| WO2010134325A1 | 2010-11-25 | |||
| US20110145918A1 | 2011-06-16 | |||
| CN102521543A | 2012-06-27 |
Other References:
JPN6014026977; Ｃｌｅｍｅｎｓ ＫＯＬＢＩＴＳＣＨ ｅｔ ａｌ．: 'Ｅｆｆｅｃｔｉｖｅ ａｎｄ Ｅｆｆｉｃｉｅｎｔ Ｍａｌｗａｒｅ Ｄｅｔｅｃｔｉｏｎ ａｔ ｔｈｅ Ｅｎｄ Ｈｏｓｔ' １８ｔｈ ＵＳＥＮＩＸ ＳＥＣＵＲＩＴＹ ＳＹＭＰＯＳＩＵＭ , 200908
Attorney, Agent or Firm:
Sakai International Patent Office
Previous Patent: A bad smell control constituent which has activation Al Ken, and a method for the same
Next Patent: EYE DROPS
Next Patent: EYE DROPS