公开(公告)号：US12189761B2

公开(公告)日：2025-01-07

申请号：US17329663

申请日：2021-05-25

Applicant: LINE Plus Corporation

Inventor： Sang Min Chung ,  Joontae Choi ,  SangHun Jeon

IPC: G06F21/55 ,  G06F21/14 ,  G06F21/52 ,  G06F21/56 ,  H04L67/133

Abstract: Disclosed is a hooking detection method and system that may specify position information of a function referenced by an executable module from an outside or provided to the outside or a unique value of an executable code, and may determine application programming interface (API) hooking based on a classification acquired by comparing unique values or by clustering the unique values.

公开(公告)号：US11921874B2

公开(公告)日：2024-03-05

申请号：US17333575

申请日：2021-05-28

Applicant: LINE Plus Corporation

Inventor： Sang Min Chung ,  Seol hwa Han ,  SangHun Jeon

IPC: G06F21/62 ,  G06F8/61

CPC classification number: G06F21/6218 ,  G06F8/61

Abstract: A file protection method of a computer apparatus including a processor, the method including extracting classes from an executable file of a package file, classifying the classes into class groups, adding a loading code to a first class group among the class groups, the loading code configured to cause sequential loading of the class groups to a memory in a random loading order in response to execution of the package file, adding an integrity code to a second class group among the class groups, the integrity code configured to verify an integrity of a corresponding class group among the class groups or a previous class group among the class groups, the previous class group including the loading code configured to cause the corresponding class group to load, and regenerating the package file using the class groups after the adding the loading code and the adding the integrity code.