Apparatus and method for blocking ransome ware using access control to the contents file

A method for blocking Ransome ware to a contents file using access control to the contents files comprising;

• determining whether a program of the process detected as being started in the user's computer is a program that is allowed to access the contents file;
• and
• blocking the access of the process to the contents file registered in a whitelist registration unit registering the contents file information to be protected if the program of the process is not the program that is allowed to access the contents file,
• wherein the step of determining whether the program of the process is the program that is allowed to access the contents file includes;
• determining whether the process of the program is a reliable program;
• checking parent process information comprising tracing the process tree to obtain parent process information for the program of the process if the program of the process is the reliable program, determining whether the obtained program of the parent process is the reliable program, and determining whether the program of the parent process is Explorer.exe or Services.exe when the program of the parent process is the reliable program;
• and
• storing the program of the process as the contents file access permission program when the program of the parent process is Explorer.exe or Services.exe.