Title:
INFORMATION-PROCESSING DEVICE, INFORMATION-PROCESSING MONITORING METHOD, PROGRAM, AND RECORDING MEDIUM
Document Type and Number:
WIPO Patent Application WO/2015/174512
Kind Code:
A1
Abstract:
An information-processing device (1) is provided with a Syscall-instruction-monitoring unit (313) for monitoring an instruction for passing on at least a process to a kernel (35) of an OS among instructions issued to a CPU (11), and a dedicated loader (201) for loading monitoring software (31) functioning as the Syscall-instruction-monitoring unit (313) into an area (A) of RAM (30) with ring (0) higher than a ring (2) set to the kernel (35) of the OS. Whereby, even when a resource is accessed by execution of an illegal program, the access is detected and intrusion of the illegal program into the kernel is blocked.
Inventors:
SUGINAKA JUNKO (JP)
Application Number:
PCT/JP2015/063975
Publication Date:
November 19, 2015
Filing Date:
May 15, 2015
Export Citation:
Assignee:
SUGINAKA JUNKO (JP)
International Classes:
G06F11/30
Foreign References:
| US7996836B1 | 2011-08-09 |
Other References:
TATSUYA TAKEHISA: "AES-NI Meirei ni Taisuru Reigai Shori Kogeki no Malware Kaiseki eno Oyo", 2 014 NEN SYMPOSIUM ON CRYPTOGRAPHY AND INFORMATION SECURITY GAIYOSHU, THE INSTITUTE OF ELECTRONICS, INFORMATION AND COMMUNICATION ENGINEERS, 24 January 2014 (2014-01-24), pages 1 - 8, XP008185410
KOICHI ONOUE: "VMM-based Architecture for Protecting Application Data", SYMPOSIUM ON ADVANCED COMPUTING SYSTEMS AND INFRASTRUCTURES SACSIS2009 RONBUNSHU, vol. 2009, no. 5, 21 May 2009 (2009-05-21), pages 189 - 197, XP008185403
TAKUYA YOSHIMURA: "System call hook method for analyzing behavior of malware by virtual machine monitor", DAI 72 KAI (HEISEI 22 NEN) ZENKOKU TAIKAI KOEN RONBUNSHU (3) NETWORK SECURITY, 8 March 2010 (2010-03-08), pages 3-609 - 3-610, XP055236759
SHIN'ETSU IZAWA: "Kasoka no Standard wa Cloud e Keiryo Secure na Hypervisor Xen", ASCII. TECHNOLOGIES, vol. 15, no. 5, 24 March 2010 (2010-03-24), pages 48 - 57, XP008185584
See also references of EP 3144813A4
KOICHI ONOUE: "VMM-based Architecture for Protecting Application Data", SYMPOSIUM ON ADVANCED COMPUTING SYSTEMS AND INFRASTRUCTURES SACSIS2009 RONBUNSHU, vol. 2009, no. 5, 21 May 2009 (2009-05-21), pages 189 - 197, XP008185403
TAKUYA YOSHIMURA: "System call hook method for analyzing behavior of malware by virtual machine monitor", DAI 72 KAI (HEISEI 22 NEN) ZENKOKU TAIKAI KOEN RONBUNSHU (3) NETWORK SECURITY, 8 March 2010 (2010-03-08), pages 3-609 - 3-610, XP055236759
SHIN'ETSU IZAWA: "Kasoka no Standard wa Cloud e Keiryo Secure na Hypervisor Xen", ASCII. TECHNOLOGIES, vol. 15, no. 5, 24 March 2010 (2010-03-24), pages 48 - 57, XP008185584
See also references of EP 3144813A4
Attorney, Agent or Firm:
Kaede Patent Attorneys' Office (JP)
Patent business corporation Kaede Patent Attorneys' Office (JP)
Patent business corporation Kaede Patent Attorneys' Office (JP)
Download PDF:
Previous Patent: TRICYCLIC HETEROCYCLIC DERIVATIVE HAVING HIV REPLICATION-INHIBITING EFFECT
Next Patent: BALL JOINT
Next Patent: BALL JOINT