NETWORK ACCESS CONTROL SYSTEM AND METHOD THEREOF CAPABLE OF BLOCKING THE EXPOSURE OF MALICIOUS INFORMATION

摘要

PURPOSE: A network access control system and method thereof are provided to promote user convenience and security strength by blocking or allowing the traffic of a network packet based on thread ID(Identification) or process ID.;CONSTITUTION: A process inspection unit(310) detects code injection based thread included in a process. A network monitoring unit(320) executes a network filtering process. The network monitoring unit detects a network packet approaching to the network. When the communication subject of the detected network packet is the code injection based thread, the network monitoring unit blocks the traffic of the detected network packet.;COPYRIGHT KIPO 2013;[Reference numerals] (310) Process inspection unit; (311) Process information collection unit; (312) Code injection detection unit; (312a) Virtual address space information collection unit; (312b) Virtual address space examination unit; (313) Code injection based thread detection unit; (313a) Thread information collection unit; (313b) Address comparison unit; (320) Network monitoring unit; (321) Network filter unit; (322) Network blocking unit