US 11,989,292 B2
Analysis function imparting device, analysis function imparting method, and recording medium
Toshinori Usui, Musashino (JP); Yuto Otsuki, Musashino (JP); Makoto Iwamura, Musashino (JP); Yuhei Kawakoya, Musashino (JP); and Jun Miyoshi, Musashino (JP)
Assigned to NIPPON TELEGRAPH AND TELEPHONE CORPORATION, Tokyo (JP)
Appl. No. 17/283,546
Filed by NIPPON TELEGRAPH AND TELEPHONE CORPORATION, Tokyo (JP)
PCT Filed May 21, 2019, PCT No. PCT/JP2019/020095
§ 371(c)(1), (2) Date Apr. 8, 2021,
PCT Pub. No. WO2020/075335, PCT Pub. Date Apr. 16, 2020.
Claims priority of application No. 2018-192966 (JP), filed on Oct. 11, 2018.
Prior Publication US 2021/0390183 A1, Dec. 16, 2021
Int. Cl. G06F 21/56 (2013.01); G06F 9/54 (2006.01); G06F 21/54 (2013.01)
CPC G06F 21/563 (2013.01) [G06F 9/54 (2013.01); G06F 21/54 (2013.01); G06F 2221/032 (2013.01)] 20 Claims
OG exemplary drawing
 
1. An analysis function imparting device comprising:
processing circuitry configured to:
execute a script on a script engine of an operating system or an application running on the operating system while monitoring the script engine to acquire an execution trace including an application programming interface (API) trace and a branch trace;
analyze the execution trace, and detect a hook point that is a location to which a hook is applied and a code for analysis is inserted;
detect, based on monitoring at the hook point, a tap point that is a memory monitoring location at which the code for analysis outputs a log; and
apply the hook to the script engine to impart an analysis function to the script engine based on the hook point and the tap point.