The method of emulating the feasibility cord/code in order to inspect the malice characteristic of the feasibility cord/code

摘要

For example in the human the decipherment possible cord/code (whether or not macro and the script) is, of regardless, for example or the cord/code which is compiled (whether or not the feasibility file of Windows) is, the method of emulating the feasibility cord/code of regardless. One or plural contents attributes (the property which is relationship in malice characteristic, for example random value) it defines in facilities clocking concerning the variable of the cord/code. For example in facilities clocking, in addition malice state (, combination with the call and the contents of a certain specification for the system function of a certain specification) the list is defined. The case where substitution order is emulated, following to the contents which are substituted, it sets the attribute of the variable which is substituted. The case where mathematical operator is emulated, also contents calculation is applied. The case where the function call is emulated, present state (identity of function call contents) by comparison with a malice state where it is defined beforehand, when one malice state agrees at least, malice characteristic of the cord/code is decided.