Patent ID: 8813226

Claim:
A defense method against intelligent bots using masqueraded virtual machine information, the method comprising: performing global hooking on a virtual machine detection request transmitted by a process; determining, on the basis of pre-stored malicious process information, whether or not the process transmitting the virtual machine detection request corresponds to a malicious process; and when the process is found to correspond to the malicious process as a result of the determination, determining that the process is generated by an intelligent bot, and returning the masqueraded virtual machine information to the process, wherein the intelligent bot is configured to stop the malicious process upon receiving masqueraded virtual machine information, and wherein the masqueraded virtual machine information includes at least one selected from masqueraded file information, masqueraded network address information, and masqueraded registry information; and wherein the masqueraded file information, masqueraded network address information, and masqueraded registry information are to masquerade the state of a user terminal and to indicate use of a virtual machine.