APPARATUS AND METHOD FOR CONTROLLING FILE FLOW USING THREAD IN KERNAL MODE, AND PROGRAM STORING MEDIUM FOR EXECUTING THE METHOD

摘要

PURPOSE: A file flow control device using thread in a kernel mode, a method thereof, and program recording medium are provided to effectively control a file flow generated in various applications by using a thread start address in the kernel mode. CONSTITUTION: A thread address collecting unit(210) collects a start address of thread generated in operation related to the input or output of user files in a target application process. A file flow control unit(220) controls the flow of a file by analyzing a start address of the thread. A thread address analysis unit(221) determines whether the thread is generated in the target application based on the start address of the thread. When the thread is generated by the input or output operation of the user file, a file blocking unit(223) blocks the input or output of the user files. [Reference numerals] (210) Thread address collecting unit; (221) Thread address analysis unit; (222) Block target determining unit; (223) File blocking unit; (230) Thread DB;