US 2015/0089641 A1 · COMPUTER SYSTEM AND SIGNATURE VERIFICATION SERVER

Abstract

Disclosed are a computer system, a signature verification server, a method of supporting signature verification by a computer system, and a method of verifying signature. Embodiments of the present disclosure relates to a technology of misdiagnosis verification of signature used for a malicious code diagnosis, and more particularly to technologies which derive a result of performance of a malicious code diagnosis simulation on signature in a multi-user computer environment to use an actual client antivirus software and thus can overcome physical, spatial, and temporal limitations of conventional signature misdiagnosis verification by pre-distributing preliminary application signature in a state where misdiagnosis verification has not been completed to a plurality of user computers to reflect the preliminary application signature to a malicious code diagnosis on files stored in the plurality of user computers and performing misdiagnosis verification on the preliminary application signature based on information collected in connection with a result of the diagnosis.

Claims19

Dependent claims

A computer system comprising:

a file storage unit configured to store one or more files;
a malicious code diagnosis performer configured to perform a malicious code diagnosis on the one or more files by using a preliminary application signature in a state where misdiagnosis verification has not been completed;
and
a verification related information provider configured to, when a particular file is diagnosed as a malicious code as a result of the malicious code diagnosis using the preliminary application signature, provide verification related information required for the misdiagnosis verification based on a diagnosed result to a particular signature verification server.

1 more element

A signature verification server comprising:

a verification related information collector configured to collect, from one or more computer systems, verification related information according to a diagnosis result of a particular file diagnosed as the malicious code in accordance with a preliminary application signature in a state where misdiagnosis verification has not been completed;
a verification performer configured to perform the misdiagnosis verification on the preliminary application signature based on the collected verification related information;
and
a verification result provider configured to provide a verification result of the misdiagnosis verification to the one or more computer systems having the preliminary application signature.

1 more element

A method of verifying signature by a signature verification server, the method comprising:

collecting, from one or more computer systems, verification related information according to a diagnosis result of a particular file diagnosed as malicious code according to preliminary application signature in a state where misdiagnosis verification has not been completed;
performing the misdiagnosis verification on the preliminary application signature based on the collected verification related information;
and
providing a verification result of the misdiagnosis verification to the one or more computer systems having the preliminary application signature.

1 more element

Dependencies are inferred from the claim text.

Computer system and signature verification server

Life of this patent

Computer system and signature verification server

Life of this patent

Abstract

Claims19