SYSTEM RECOVERY METHOD IN ADVANCED PERSISTENT THREAT

摘要

The present invention relates to a system recovery method, and a system recovery method according to the present invention is a method for restoring a system file of a corresponding terminal when an abnormal operation including an installation of an abnormal program including a spyware or an attempt to hack is monitored in a user terminal or an administrator terminal A recovery mode 1 for recovering a system file to an original image, and a recovery mode 3 for updating a patch program related to a system file before a window is shut down, The present invention relates to a method for recovering a system in an intelligent continuous threat environment in which a file can be restored to recover a system to a set target recovery time or a data target recovery point to reduce a maximum tolerable period of disruption.