COMPUTER SYSTEM FOR EFFICIENTLY BLOCKING A DYNAMIC LINK LIBRARY INSERTION ATTACK

摘要

PURPOSE: A computer system and method are provided to monitor operation that one process dynamically connects an executable code library to the other process and to block the operation.;CONSTITUTION: A computer system(100) a monitoring unit(120) and a blocking unit(130). The monitoring unit monitors operation that one process dynamically connects an executable code library to the other process. In case the operation occurs, the blocking unit blocks the connection of the executable code library. The monitoring unit comprises a call monitoring unit and a connection confirmation unit.;COPYRIGHT KIPO 2011