公开(公告)号：US20150089655A1

公开(公告)日：2015-03-26

申请号：US14492177

申请日：2014-09-22

Applicant: ELECTRONICS AND TELECOMMUNICATIONS RESEARCH INSTITUTE

Inventor： Young Han CHOI ,  Haksoo KIM ,  Deokjin KIM ,  JungMin KANG ,  HyungGeun OH ,  Kiwook SOHN

IPC: H04L29/06 ,  G06F21/56

CPC classification number: H04L63/145 ,  G06F21/566 ,  H04L63/1425

Abstract: A system and method for detecting malware based on a virtual host are provided. The system for detecting malware based on a virtual host includes a terminal network behavior analysis server and a virtual host. The terminal network behavior analysis server extracts network behavior information by monitoring the network behavior of an actual host, and outputs the extracted the network behavior information. The virtual host detects malware corresponding to abnormal behavior in the actual host, by receiving the network behavior information and then performing corresponding behavior.

Abstract translation: 提供了一种基于虚拟主机来检测恶意软件的系统和方法。 用于基于虚拟主机检测恶意软件的系统包括终端网络行为分析服务器和虚拟主机。 终端网络行为分析服务器通过监控实际主机的网络行为来提取网络行为信息，并输出提取的网络行为信息。 虚拟主机通过接收网络行为信息，然后执行相应的行为来检测与实际主机异常行为相对应的恶意软件。