Patent Document ID: 20160072833
Application ID: 14788831
Patent Status: 0

Claim One:
1. An apparatus for searching for similar malicious code based on malicious code feature information, comprising: a malicious code registration unit for registering input new malicious code as a new malicious code sample, and extracting and registering detailed information of the new malicious code sample; a malicious code analysis unit for analyzing the detailed information of the new malicious code sample; a malicious code DNA extraction unit for extracting malicious code DNA information including malicious code feature information, based on analyzed malicious code information output from the malicious code analysis unit; a malicious code DNA comparison unit for comparing the extracted malicious code DNA information with malicious code DNA information of prestored malicious code samples, for each DNA type, and then calculating similarities therebetween for each DNA type; and a similar malicious code search unit for calculating, based on the similarities calculated by the malicious code DNA comparison unit, all similarities between the new malicious code sample and the prestored malicious code samples, and extracting a specific number of malicious code samples as a result of searching for similar malicious code.