公开(公告)号：US09965631B2

公开(公告)日：2018-05-08

申请号：US15074497

申请日：2016-03-18

Applicant: Electronics and Telecommunications Research Institute

Inventor： Sang-Rok Lee ,  Jung-Hee Lee ,  Byung-Chul Bae

IPC: G06F21/00 ,  G06F21/56

CPC classification number: G06F21/566

Abstract: Disclosed herein are an apparatus and method for analyzing malicious code in a multi-core environment. The apparatus for analyzing malicious code includes a core setting unit for setting at least one monitoring core, on which malicious code is to be monitored, among cores of a multi-core Central Processing Unit (CPU), and executing a monitoring program on the monitoring core, a behavioral information collection unit for, when execution cores that are not set as the monitoring core execute analysis target code, collecting pieces of behavioral information using the monitoring program and a hardware debugging device, and a storage unit for storing the behavioral information.