Korea Internet & Security Agency

Han Chul Bae

Soo Jin Yoon

Hwan Mook Kim

Tae Eun Kim

Jee Soo Jurn

Dae Il Jang

Hwan Kuk Kim

Geon Bae Na

Sang Hwan Oh

Jong Ki Kim

Woung Jang

Jong Hun Jung

Hyun Rok Choo

There is provided a method of patching a binary having vulnerability which is performed by a computing device. The method comprises loading a first binary to be patched, into a memory, generating a second binary by patching to call a stack frame initialization function from a vulnerable function of the first binary, executing the stack frame initialization function by calling the vulnerable function when the second binary is executed and initializing a stack frame area of the vulnerable function so as to automatically initialize a variable declared in the vulnerable function.

Method and apparatus for patching binary having vulnerability

Provided are an apparatus, a system and a method for detecting and preventing malicious scripts. The apparatus for detecting and preventing malicious scripts includes a signature management unit managing a first signature including code pattern information of previously-detected malicious scripts, a script analysis unit receiving the first signature from the signature management unit and analyzing a first script, which is included in a web page, using the first signature, and a script processing unit receiving analysis result data from the script analysis unit and processing the first script according to the analysis result data.

Apparatus, system and method for detecting and preventing malicious scripts using code pattern-based static analysis and API flow-based dynamic analysis

Growing community of inventors

Naju-si, South Korea

Han Chul Bae