Title:
コンピュータウィルス固有情報抽出装置、コンピュータウィルス固有情報抽出方法及びコンピュータウィルス固有情報抽出プログラム
Document Type and Number:
Japanese Patent JP4025882
Kind Code:
B2
Abstract:
To enable quick extraction of computer virus identifying information. A server 100 identifies an "Import Table" etc. of a header item of a specific region predetermined as a storage region of information able to be deemed as identifying in an exec file identified as a computer virus as a region of a signature item, reads out the content of the "Import Table" etc., and extracts it as a signature. Further, the server 100 combines a plurality of signatures to extract a new signature.
Inventors:
Yuji Atsui
Naoji Nakatani
Ryuichi Koike
Naoji Nakatani
Ryuichi Koike
Application Number:
JP2006512621A
Publication Date:
December 26, 2007
Filing Date:
April 25, 2005
Export Citation:
Assignee:
Iwate University
International Classes:
G06F21/56; G06F11/00
Domestic Patent References:
| JP6250861A |
Foreign References:
| WO2003090050A1 | ||||
| WO2001069356A1 | ||||
| WO2002035328A1 |
Other References:
益田岳人,ウイルス対策ソフト ANTIDOTE SDKの概要,Interface,CQ出版株式会社,2001年 6月 1日,第27巻,第6号,p.148-p.156
Attorney, Agent or Firm:
Masaki Higuchi