Malicious code prevention apparatus and method using level classification of suspicious behavior and isolated execution, and computer-readable medium storing program for method thereof

摘要

PURPOSE: A malicious code prevention apparatus using level classification of suspicious behavior and isolated execution, a method thereof and a computer-readable medium storing program for the method thereof are provided to protect a system in safety by allowing a computer-readable recording medium to process doubtful behavior. CONSTITUTION: A behavior monitoring unit(110) monitors the behavior that a program is performed in a system. Based on the characteristics of a malicious code and a normal code, a behavior classifying unit(120) classifies the behavior according to the level. A separation execution unit(140) performs the behavior so that the corresponding behavior may be separated from the system. The behavior is mainly used for the malicious code as the level classification result. In addition, the behavior is sometimes used for a normal code.