Title:
ANOMALY DETECTION DEVICE AND METHOD USING FUNCTION CALL PATTERN ANALYSIS
Document Type and Number:
WIPO Patent Application WO/2021/261901
Kind Code:
A1
Abstract:
The present disclosure relates to an anomaly detection device and method using function call pattern analysis, and one embodiment includes an anomaly detection device using function call pattern analysis, the device comprising: a data collection unit for collecting function call data about functions called according to the execution of an application; a data analysis unit which forms function call automata for a plurality of functions forming the application, and which inputs the function call data into the function call automata to analyze the anomaly of the function call data; and an output unit for outputting error situation information including call location and call time for the function in which an anomaly has occurred, if it is determined that the anomaly has occurred in the function call data.
Inventors:
JEONG HAE GEON (KR)
KANG KYUNG TAE (KR)
KANG KYUNG TAE (KR)
Application Number:
PCT/KR2021/007857
Publication Date:
December 30, 2021
Filing Date:
June 23, 2021
Export Citation:
Assignee:
IUCF HYU ERICA CAMPUS (KR)
International Classes:
G06F11/30; G06F11/32; G06F11/34
Foreign References:
| KR101271821B1 | 2013-06-07 | |||
| KR101868720B1 | 2018-07-17 | |||
| JP2006053788A | 2006-02-23 | |||
| CN105528295A | 2016-04-27 |
Other References:
SEKAR R; BENDRE M; DHURJATI D; BOLLINENI P: "A fast automaton-based method for detecting anomalous program behaviors", PROCEEDINGS OF THE 2001 IEEE SYMPOSIUM ON SECURITY AND PRIVACY. S&P 2001. OAKLAND, CA, MAY 14 - 16, 2001; [PROCEEDINGS OF THE IEEE SYMPOSIUM ON SECURITY AND PRIVACY], 14 May 2001 (2001-05-14), pages 144 - 155, XP010543214, ISBN: 978-0-7695-1046-0, DOI: 10.1109/SECPRI.2001.924295
Attorney, Agent or Firm:
YUIL HIGHEST INTERNATIONAL PATENT AND LAW FIRM (KR)
Download PDF: