公开(公告)号：US20090313699A1

公开(公告)日：2009-12-17

申请号：US12332012

申请日：2008-12-10

申请人： In Sook JANG ,  Eun Young LEE ,  Hyung Geun OH ,  Do Hoon LEE

发明人： In Sook JANG ,  Eun Young LEE ,  Hyung Geun OH ,  Do Hoon LEE

IPC分类号： G06F11/30 ,  G06F21/22

CPC分类号： G06F21/554 ,  G06F21/52

摘要： An apparatus and method for preventing an anomaly of an application program are provided. More particularly, an apparatus and method for preventing an anomaly of an application program that detect and stop an anomaly on the basis of a behavior profile for an application program are provided. The apparatus includes a behavior monitor that detects behavior of an application program in operation, an anomaly detector that determines whether the detected behavior of the application program is an anomaly on the basis of a behavior profile of the application program in operation, and an anomaly stopper that stops the behavior of the application program determined as an anomaly by the anomaly detector. Possible application program behavior is stored according to its purpose in a behavior profile and an anomaly is detected and stopped on the basis of the behavior profile, thereby decreasing a false-positive rate of anomaly detection and simultaneously solving a problem of a conventional security programs being incapable of defending against attacks using the authority of a program trusted by a user.

摘要翻译： 提供一种用于防止应用程序的异常的装置和方法。 更具体地，提供一种用于防止基于应用程序的行为特征来检测和停止异常的应用程序的异常的装置和方法。 该装置包括：行为监视器，其检测运行中的应用程序的行为;异常检测器，其基于运行中的应用程序的行为特征来确定检测到的应用程序的行为是否为异常;异常阻塞 这阻止由异常检测器确定为异常的应用程序的行为。 可能的应用程序行为根据其目的存储在行为配置文件中，并且基于行为配置文件检测和停止异常，从而减少异常检测的假阳性率并同时解决常规安全程序的问题 不能使用用户信任的程序的权限来防御攻击。

公开(公告)号：US20090259673A1

公开(公告)日：2009-10-15

申请号：US12194600

申请日：2008-08-20

申请人： Young Han CHOI ,  In Sook JANG ,  Hyung Geun OH ,  Do Hoon LEE

发明人： Young Han CHOI ,  In Sook JANG ,  Hyung Geun OH ,  Do Hoon LEE

IPC分类号： G06F17/30

CPC分类号： G06Q10/107 ,  G06F16/313 ,  G06F16/345

摘要： Provided are a method and apparatus for extracting text from an Internet mail attachment file. The apparatus includes a mail display unit for displaying Internet mail and an attachment file received from outside, an attachment file storage for storing the attachment file, a text extraction engine for extracting a text code included in the attachment file, and an attachment file text extractor for extracting text included in the attachment file using the text extraction engine.

摘要翻译： 提供了一种从Internet邮件附件文件中提取文本的方法和装置。 该装置包括用于显示互联网邮件的邮件显示单元和从外部接收的附件文件，用于存储附件文件的附件文件存储器，用于提取包含在附件文件中的文本代码的文本提取引擎，以及附件文件文本提取器 用于使用文本提取引擎提取附件文件中包含的文本。