公开(公告)号：US20180278635A1

公开(公告)日：2018-09-27

申请号：US15811248

申请日：2017-11-13

Applicant: Korea Advanced Institute of Science and Technology

Inventor： Seungwon Shin ,  Chanhee Lee ,  Changhoon Yoon ,  Sang Kil Cha

IPC: H04L29/06 ,  G06F9/54 ,  G06N99/00

CPC classification number: H04L63/1425 ,  G06F9/547 ,  G06N20/00 ,  H04L45/38 ,  H04L45/42 ,  H04L45/64 ,  H04L63/145

Abstract: Disclosed are an apparatus, a method, and a computer program by which it is determined whether a target network program generated in a software defined network is malicious by extracting a feature of a behavior graph of the target network program and applying machine learning to the behavior graph. Accordingly, a security and safety of a software defined network may be improved by detecting whether a computer program is malicious before the malware is installed.

公开(公告)号：US11860765B2

公开(公告)日：2024-01-02

申请号：US17520414

申请日：2021-11-05

Applicant: KOREA ADVANCED INSTITUTE OF SCIENCE AND TECHNOLOGY

Inventor： Sang Kil Cha ,  Jaeseung Choi ,  Daejin Lee ,  Kangsu Kim

IPC: G06F11/00 ,  G06F11/36 ,  G06F11/34 ,  G06F11/30

CPC classification number: G06F11/3636 ,  G06F11/302 ,  G06F11/3461 ,  G06F11/3692

Abstract: Disclosed is a window kernel fuzzing technique utilizing type information obtained through binary static analysis. The method of fuzzing a kernel of a computer operating system performed by a fuzzing system may include the steps of: automatically inferring type information of a system call using a library file provided by the computer operating system; and performing system call fuzzing on the basis of the type information of the system call obtained through the inference.

公开(公告)号：US20230051654A1

公开(公告)日：2023-02-16

申请号：US17520414

申请日：2021-11-05

Applicant: KOREA ADVANCED INSTITUTE OF SCIENCE AND TECHNOLOGY

Inventor： Sang Kil Cha ,  Jaeseung Choi ,  Daejin Lee ,  Kangsu Kim

IPC: G06F11/36 ,  G06F11/30 ,  G06F11/34

Abstract: Disclosed is a window kernel fuzzing technique utilizing type information obtained through binary static analysis. The method of fuzzing a kernel of a computer operating system performed by a fuzzing system may include the steps of: automatically inferring type information of a system call using a library file provided by the computer operating system; and performing system call fuzzing on the basis of the type information of the system call obtained through the inference.