COMPUTER VIRUS UNIQUE INFORMATION EXTRACTION DEVICE, COMPUTER VIRUS UNIQUE INFORMATION EXTRACTION METHOD, AND COMPUTER VIRUS UNIQUE INFORMATION EXTRACTION PROGRAM

摘要

To enable quick extraction of computer virus identifying information.;A server 100 identifies an "Import Table" etc. of a header item of a specific region predetermined as a storage region of information able to be deemed as identifying in an exec file identified as a computer virus as a region of a signature item, reads out the content of the "Import Table" etc., and extracts it as a signature. Further, the server 100 combines a plurality of signatures to extract a new signature.