Industrial Technology Research Institute

Tzy-Shiah Wang

Chuan-Yu Cho

Tzi-Cker Chiueh

Li-Ting Huang

Pan-Jo Chuang

Lap Chung Lam

Nien-Chi Liu

Che-Hao Liu

A method for generating an application white list is applicable to a server. The method is performed by a computing device communicably connected to the server and includes following steps: collecting a network log and a system log of the server, performing an analysis procedure to extract a plurality of application attributes from the network log and the system log with one of the application attributes being an application identifier, performing a training procedure according to the plurality of application attributes to generate a candidate rule, according to a plurality of behaviors in the network log and the system log, calculating the ratio of the number of behaviors among said plurality of behaviors that conforming to the candidate rule to a number of all of said plurality of behaviors, and storing the candidate rule to a whitelist when the ratio falls within a trust interval.

Method and system for generating application white list

A method for preventing malicious software from attacking files of a computer system includes the following steps. Whether a file type of a specific file corresponding to an input/output (I/O) request is a to-be-backed-up file type is checked, wherein the to-be-backed-up file type belongs to one of multiple predetermined file types susceptible to malicious software attack. When the file type of the specific file is the to-be-backed-up file type, a backup already tag in a file context tag structure of the specific file is checked. When the backup already tag shows that the specific file has not been backed up, a backup process is performed for the specific file.

Method and computer system for preventing malicious software from attacking files of the computer system and corresponding non-transitory computer readable storage medium

Growing community of inventors

Tainan, Taiwan

Tzy-Shiah Wang