SYSTEM AND METHOD FOR DETECTING AND CLASSIFYING MALWARE USING MACHINE LEARNING AND DYNAMIC FEATURE OF APPLICATIONS

摘要

The present invention is a technology for a system and method capable of detecting malicious code in an application processed by encryption, compression, obfuscation, packing, etc. by driving an application to extract dynamic features and analyzing the extracted dynamic features. The command execution unit that executes a preset event for an application in the state, a feature data extraction unit that extracts dynamic feature data from an application in which the event of the command execution unit is executed, and dynamic feature data extracted by the feature data extraction unit are patterned. It includes a conversion unit for generating pattern data, and a malicious code inspection unit for diagnosing whether the pattern data contains malicious code using machine learning.