MEMORY HACKING DETECTION METHOD AND SYSTEM

文件类型：PDF文档
文件大小：344K
PROBLEM TO BE SOLVED : To provide a method and a system for detecting memory hacking that detect alteration of variable values of programs executed on a memory. SOLUTION : An attribute is provided to a variable in a program, using a protection library including variable attribute information (420). The type and the operator of a first variable provided with a first attribute are re-defined with the protection library, and memory hacking to the first variable is detected based on whether the value of the first variable has been changed by an operator other than the re-defined operator or whether the value of the first variable is out of the range of the re-defined type, in a case where the value of the first variable has been changed (430). Further, the change in the value of a second variable provided with a second attribute is monitored periodically and memory hacking to the second variable is detected based on whether the change in the value of the second variable is beyond a change limitation set by the second attribute (440). SELECTED DRAWING : Figure 4 COPYRIGHT : (C)2017, JPO&INPIT