APPARATUS FOR DETECTING MALICIOUS SCRIPT AND PREVENTING EXECUTION OF MALICIOUS SCRIPT BASED ON HOST LEVEL AND METHOD FOR DETECTING MALICIOUS SCRIPT AND PREVENTING EXECUTION OF MALICIOUS SCRIPT

摘要

Provided are an apparatus for detecting a malicious script and preventing execution of the malicious script based on a host level, and a method for detecting the malicious script and preventing the execution of the malicious script. The apparatus for detecting the malicious script and preventing execution of the malicious script includes: an analysis target extraction unit for receiving a web page request message to extract a connection URL, and receiving a web page reception message to extract document object model (DOM) information of a received web page; an interface unit for receiving the connection URL and the DOM information from the analysis target extraction unit and parsing an analysis target URL, an analysis target script, and process information from the connection URL and the DOM information; an analysis unit for receiving the analysis target URL and the analysis target script from the interface unit to perform malicious URL check and malicious script check; and a memory analysis unit for receiving the process information from the interface unit to dump a process memory corresponding to the process information, and extracting a memory script to determine whether the memory script is malicious.;COPYRIGHT KIPO 2017