SYSTEM FOR PROVIDING WHITELIST BASED ABNORMAL PROCESS ANALYSIS SERVICE

摘要

A white list-based abnormal process analysis service providing system is provided, an analysis agent is installed, information of at least one process or file to be executed is collected and transmitted by the analysis agent together with at least one identification information, and is stored in a pre-stored white list. At least one process or file that is not included maps and stores a white list including information on at least one user terminal that stops execution and at least one process or file that is safe to run with metadata of at least one process or file A storage unit, a collection unit that collects information of at least one process or file executed in at least one user terminal in real time from an analysis agent installed in at least one user terminal, and a white list of information of at least one process or file being executed and an analysis service providing server including a transmission unit for transmitting an alarm to the manager terminal when the information does not match.