Title:
COMPUTER VIRUS UNIQUE INFORMATION EXTRACTION DEVICE, COMPUTER VIRUS UNIQUE INFORMATION EXTRACTION METHOD, AND COMPUTER VIRUS UNIQUE INFORMATION EXTRACTION PROGRAM
Document Type and Number:
WIPO Patent Application WO/2005/103895
Kind Code:
A1
Abstract:
It is possible to quickly extract computer virus unique information. In an execution file identified as a computer virus, a server (100) identifies as a signature item area, an “Import Table” of the header item or the like which is a particular area predetermined as a storage area of information which can be considered as unique. The server reads out the content of the “Import Table” or the like and extracts it as a signature. Furthermore, the server (100) combines a plurality of sets of signatures to be extracted as a new signature.
Inventors:
KOUI YUJI (JP)
NAKAYA NAOSHI (JP)
KOIKE RYUUICHI (JP)
NAKAYA NAOSHI (JP)
KOIKE RYUUICHI (JP)
Application Number:
PCT/JP2005/007814
Publication Date:
November 03, 2005
Filing Date:
April 25, 2005
Export Citation:
Assignee:
INC NAT UNIVERSITY IWATE UNIVE (JP)
KOUI YUJI (JP)
NAKAYA NAOSHI (JP)
KOIKE RYUUICHI (JP)
KOUI YUJI (JP)
NAKAYA NAOSHI (JP)
KOIKE RYUUICHI (JP)
International Classes:
G06F21/56; G06F11/00; (IPC1-7): G06F11/00
Domestic Patent References:
| WO2001069356A2 | 2001-09-20 | |||
| WO2002035328A1 | 2002-05-02 |
Foreign References:
| JPH06250861A | 1994-09-09 |
Other References:
MASUDA T. ET AL.: "Virus Taisaku Soft ANTIDOTE SK no Gaiy.", INTERFACE, vol. 27, no. 6, 1 June 2001 (2001-06-01), pages 148 - 156, XP002994422
See also references of EP 1742151A4
See also references of EP 1742151A4
Attorney, Agent or Firm:
Higuchi, Masaki (1-4-3 Sengencho, Nishi-ku, Yokohama-sh, Kanagawa 72, JP)
Download PDF:
Previous Patent: INITIALIZATION OF ELECTRONIC DEVICE
Next Patent: SECURE PORTABLE ELECTRONIC REFERENCE DEVICE.
Next Patent: SECURE PORTABLE ELECTRONIC REFERENCE DEVICE.