公开(公告)号：US20170083705A1

公开(公告)日：2017-03-23

申请号：US15074497

申请日：2016-03-18

Applicant: Electronics and Telecommunications Research Institute

Inventor： Sang-Rok LEE ,  Jung-Hee LEE ,  Byung-Chul BAE

IPC: G06F21/56

CPC classification number: G06F21/566

Abstract: Disclosed herein are an apparatus and method for analyzing malicious code in a multi-core environment. The apparatus for analyzing malicious code includes a core setting unit for setting at least one monitoring core, on which malicious code is to be monitored, among cores of a multi-core Central Processing Unit (CPU), and executing a monitoring program on the monitoring core, a behavioral information collection unit for, when execution cores that are not set as the monitoring core execute analysis target code, collecting pieces of behavioral information using the monitoring program and a hardware debugging device, and a storage unit for storing the behavioral information.