• 제목/요약/키워드: Process hollowing

검색결과 3건 처리시간 0.014초

프로세스 가상 메모리 데이터 유사성을 이용한 프로세스 할로윙 공격 탐지 (Proposal of Process Hollowing Attack Detection Using Process Virtual Memory Data Similarity)

  • 임수민;임을규
    • 정보보호학회논문지
    • /
    • 제29권2호
    • /
    • pp.431-438
    • /
    • 2019
  • 파일리스 악성코드는 악성 행위를 수행할 페이로드의 흔적을 은닉하기 위해 메모리 주입 공격을 이용한다. 메모리 주입 공격 중 프로세스 할로윙이라는 이름의 공격은 시스템 프로세스 등을 일시정지 상태로 생성시킨 다음, 해당 프로세스에 악성 페이로드를 주입시켜 정상 프로세스인 것처럼 위장해 악성행위를 수행하는 방법이다. 본 논문은 프로세스 할로윙 공격이 발생했을 경우, 악성 행위 실제 수행 여부와 상관없이 메모리 주입 여부를 검출할 수 있는 방법을 제안한다. 메모리 주입이 의심되는 프로세스와 동일한 실행 조건을 갖는 복제 프로세스를 실행시키고, 각 프로세스 가상 메모리 영역에 속해있는 데이터 집합을 퍼지 해시를 이용해 비교한 다음 유사도를 산출한다.

The Area-wide Economic Regions in Korea: Orthodox New Regionalism or Politically-inflicted Regionalism?

  • Cho, Cheol-Joo
    • World Technopolis Review
    • /
    • 제1권4호
    • /
    • pp.240-255
    • /
    • 2013
  • The recent interest in regions represents a rise of the new regionalism. Three competing theories provide the frameworks of explaining the ascendance of regions as the meaningful vessel of territorial economic and political processes. They are the orthodox new regionalism, the new politics of scale, and the relational topology of networked actors. Referring to these theories, this paper assesses the establishment of cross-provincial Area-wide Economic Regions (AERs) in Korea. The findings indicate that AERs represent a radical shift to a new regionalism. However, it is misconceived to see their ascendance as the orthodox new regionalism, as they marginally fit the hollowing-out of the state thesis. Nor they show distinct features to which the politically-inflicted regionalism is attributed. In consequence, AERs represent the emergence of a new regionalism that is consequent of the unique politico-economic context of Korea, say, a most centralized state-society combined with the neoliberalizing policy process emanating from the globalization pressures.

Conflict Analysis of the Nanjing Yuhuan and A.O Smith Joint Venture Case

  • Yu, Yunxia;Wang, Ying
    • Asian Journal of Business Environment
    • /
    • 제8권1호
    • /
    • pp.7-15
    • /
    • 2018
  • Purpose -This paper is to study the process of the negative effects of Sino-foreign joint ventures, hoping to find out an effective path in which local enterprises can avoid the risks in the utilization of foreign capital, and ultimately achieve independent innovation. Research design, data, and methodology -The outflow of assets, the loss of local brands and the "technology hollowing-out" problem brought by joint ventures is becoming more and more serious. Based on conflict analysis graph model, this paper takes Yuhuan joint venture as an example to identify the conflict problem in Sino-foreign joint ventures. Results -The results of the stability analysis show that establishing joint venture cannot really realize the introduction of technology because the technology is fully controlled by the foreign part. So when introducing foreign capital, local enterprises should participate in R&D and master the initiative. Conclusions - Local enterprises should pay attention to patent containment and technology blockade of multinationals. Domestic enterprises should try to protect state-owned assets and local brands in Sino-foreign joint ventures. Independent innovation is the most effective strategy for the development of enterprises in China.