Earticle

초록

영어

Under the situation that existing information protection systems adopt an approach that tackles malicious codes based on already known signatures or analyzed behavior/feature, they are limited in detecting and identifying the unknown and the deformation of the malicious code. The present study, as a means of overcoming such a shortcoming, proposes a way of endpoint application control capable of more securely protecting endpoint devices (PCs) from intrusion of malicious codes and attacks through exploitation of an application or operating system vulnerability, by implementing a hybrid of technology such as whitelist-based application execution control via authentication of integrity, media access control, prevention of modification of important files, and control over IP/port attempting for process access or reverse link.

목차

Abstract
 1. Introduction
 2. Related Works
 3. Proposed Execution Control System
  3.1. Agent Section of the System
  3.2. Event Server Section of the System
  3.3. Monitoring Console Section of the System
 4. Conclusion
 References

키워드

저자

• Chang-Hong Kim [ Department of IT Policy and Management, Graduate School of Soongsil University, Seoul 156-743, Korea ]
• Jeong-Hyun Yi [ Department of Computer Science, Soongsil University, Seoul 156-743, Korea ]
• Jong-Bae Kim [ Graduate School of Software, Soongsil University, Seoul 156-743, Korea ] Corresponding author.

참고문헌

발행기관

간행물

표지보기 관심저널 등록

• 간행물명

  International Journal of Control and Automation

• 간기

  월간

• pISSN

  2005-4297

• 수록기간

  2008~2016

• 십진분류

  KDC 505 DDC 605