EXPLOIT-CODE EXECUTION PRE-PROTECTION METHOD AND DEVICE THEREOF

The present invention relates to an exploit code execution pre-protection method and a device thereof. The embodiments of the present invention previously detect and block the execution of an exploit code based on a specific execution pattern included in an exploit code performing an attack using vu...

Ausführliche Beschreibung

Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: JANG, SANG KEUN, MOON, YOUNG JO
Format: Patent
Sprache:eng ; kor
Schlagworte:
Online-Zugang:Volltext bestellen
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
Beschreibung
Zusammenfassung:The present invention relates to an exploit code execution pre-protection method and a device thereof. The embodiments of the present invention previously detect and block the execution of an exploit code based on a specific execution pattern included in an exploit code performing an attack using vulnerabilities in various software programs. [Reference numerals] (AA) Start; (BB) Yes(memory block 1); (CC) End; (S100) Perform a software program; (S110) Detect by each memory block using the software program; (S120) Memory block in which a memory allocation size is varied to be an allowed size or greater; (S130) Check the presence of an NOP code set in a memory block 1; (S140) Replace the NOP code set into a protective code; (S150) Call the protective code replaced instead of the NOP code set in a software performing process; (S160) Stop to perform the software program, alarm; (S170) Normal performance of the software program