专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20090313699A1 APPARATUS AND METHOD FOR PREVENTING ANOMALY OF APPLICATION PROGRAM 有权
标题翻译：防止应用程序异常的装置和方法
公开(公告)号：US20090313699A1
公开(公告)日：2009-12-17
申请号：US12332012
申请日：2008-12-10
申请人： In Sook JANG , Eun Young LEE , Hyung Geun OH , Do Hoon LEE
发明人： In Sook JANG , Eun Young LEE , Hyung Geun OH , Do Hoon LEE
IPC分类号： G06F11/30 , G06F21/22
CPC分类号： G06F21/554 , G06F21/52
摘要： An apparatus and method for preventing an anomaly of an application program are provided. More particularly, an apparatus and method for preventing an anomaly of an application program that detect and stop an anomaly on the basis of a behavior profile for an application program are provided. The apparatus includes a behavior monitor that detects behavior of an application program in operation, an anomaly detector that determines whether the detected behavior of the application program is an anomaly on the basis of a behavior profile of the application program in operation, and an anomaly stopper that stops the behavior of the application program determined as an anomaly by the anomaly detector. Possible application program behavior is stored according to its purpose in a behavior profile and an anomaly is detected and stopped on the basis of the behavior profile, thereby decreasing a false-positive rate of anomaly detection and simultaneously solving a problem of a conventional security programs being incapable of defending against attacks using the authority of a program trusted by a user.
摘要翻译：提供一种用于防止应用程序的异常的装置和方法。更具体地，提供一种用于防止基于应用程序的行为特征来检测和停止异常的应用程序的异常的装置和方法。该装置包括：行为监视器，其检测运行中的应用程序的行为;异常检测器，其基于运行中的应用程序的行为特征来确定检测到的应用程序的行为是否为异常;异常阻塞这阻止由异常检测器确定为异常的应用程序的行为。可能的应用程序行为根据其目的存储在行为配置文件中，并且基于行为配置文件检测和停止异常，从而减少异常检测的假阳性率并同时解决常规安全程序的问题不能使用用户信任的程序的权限来防御攻击。

IPRDB

热门服务

关于我们

友情链接

联系方式