Application program action control device, application program action control method, and recording medium

Abstract

The AP action control device (10) includes a storage unit (12) for storing associated file information and associated AP information. The associated file information indicates a file whose integrity should be confirmed when the integrity of each AP is determined, i.e., an associated file. The associated AP information indicates an AP that may be affected when the integrity of each AP is damaged, i.e., an associated AP. In addition, the AP action control device (10) includes: a file integrity determination unit (13) for determining the integrity of the associated file of the AP; and a control object extraction unit (14) for extracting, from the associated file information, an AP corresponding to the associated file determined to have damaged integrity, and extracting, from the associated AP information, an associated AP corresponding to the AP, when the integrity of any associated file in the associated file of the AP is damaged.

Description

Technical Field

[0001] The invention relates to an application program action control device, an application program action control method and a recording medium. Background Art

[0002] In order to prevent abnormal operation of the application, it is necessary to put it into a non-working state under the condition of damaging the integrity of the application. It should also be noted that the working state refers to the state in which a process is generated (i.e., a process ID is given), and the non-working state (stopped state) refers to the state in which the process is stopped.

[0003] Here, the following contents can be considered as the contents related to the operation of the application program, for example.

[0004] (1) Content managed by application developers (for example, application execution files, setting files, libraries, etc.).

[0005] (2) Content directly related to the action that is managed by someone other than the application developer (for example, shared libraries, etc.).

[0006] (3) Content that is managed by someone other than the application developer and is not directly related to the operation but is necessary for providing the service (for example, other applications that operate in collaboration with the application).

[0007] That is, in order to prevent abnormal operation of an application, it is necessary to control the operation according to the result of checking the integrity of an operation (for example, a file or an application) associated with the operation of the application.

[0008] For example, consider the case where three APs (applications) 1 to 3 cooperate to provide a service. In this case, in order for the service to operate correctly, it is necessary to check the integrity of not only AP1 but also AP2 and AP3 to control the operation.

[0009] Prior art literature

[0010] Patent Literature

[0011] Patent Document 1: Japanese Patent Application Publication No. 2009-80772

[0012] Non-patent literature

[0013] Non-patent document 1: Sophos Anti-Virus for Linux: Overview of Fanotify, [retrieved on November 19, 2011], Internet <https: / / community.sophos.com / kb / ja-jp / 118216>

[0014] Non-patent document 2: Tripwire Enterprise, [retrieved on November 19, 2011], Internet<URL:https: / / www.tripwire.co.jp / products / enterprise / > Summary of the invention

[0015] Problems to be solved by the invention

[0016] However, the prior art (for example, the art described in Patent Document 1, Non-Patent Documents 1 and 2) cannot cope with abnormal operation caused by files associated with an application. Therefore, the present invention aims to prevent abnormal operation caused by files associated with an application.

[0017] Means for solving problems

[0018] In order to solve the above-mentioned problems, the present invention is an application action control device, characterized in that the application action control device comprises: a storage unit, which stores associated file information and associated application information, wherein the associated file information is information that corresponds to an application and a file whose integrity should be confirmed when determining the integrity of the application, namely, an associated file, and the associated application information is information that corresponds to the application and an application that may be affected when the integrity of the application is damaged, namely, an associated application; a determination unit, which determines the integrity of the associated files of the application; and a control object extraction unit, which, when it is determined that the integrity of any associated file of the associated files of the application is damaged, extracts from the associated file information an application corresponding to the associated file determined to have damaged integrity, and extracts from the associated application information an associated application corresponding to the application.

[0019] Effects of the Invention

[0020] According to the present invention, it is possible to prevent abnormal operation caused by files associated with an application program. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] Figure 1 This is a diagram showing a configuration example of an application program (AP) action control device.

[0022] Figure 2 Yes means Figure 1 Figure 3 is a diagram of an example of associated AP information.

[0023] Figure 3 Yes means Figure 1 Figure 3 is an example of associated file information.

[0024] Figure 4 Yes means Figure 1 Figure 3 is an example of correct answer information for .

[0025] Figure 5 Yes means Figure 1 Figure 3 is an example of correct answer information for .

[0026] Figure 6 Yes means Figure 1 A flowchart of an example of the processing steps of the AP action control device.

[0027] Figure 7 This is a diagram showing an example of associated AP information including an AP with a redundant configuration.

[0028] Figure 8 This is a diagram showing an example of an AP group that operates in cooperation with each other.

[0029] Fig. 9 This is a diagram showing an example of a computer that executes an AP operation control program. DETAILED DESCRIPTION

[0030] Hereinafter, the mode (embodiment) for carrying out the present invention will be described with reference to the drawings. Figure 1 , an example of the structure of the application program (AP) action control device 10 of this embodiment is described. It should also be noted that the AP that is the control object of the AP action control device 10 can be an AP that operates within the AP action control device 10, or an AP that operates outside the AP action control device 10.

[0031] [structure]

[0032] The AP operation control device 10 is a device that performs operation control of the AP, and includes, for example, a control unit 11 , a storage unit 12 , a file integrity determination unit (determination unit) 13 , a control target extraction unit 14 , and an AP operation control unit 15 .

[0033] The control unit 11 controls the storage unit 12 , the file integrity determination unit 13 , the control target extraction unit 14 , and the AP operation control unit 15 .

[0034] The storage unit 12 stores related AP information, related file information, and correct answer information.

[0035] The associated AP information is information indicating the APs that may be affected when the integrity of each AP is damaged. The associated AP information is, for example, information indicating the process name of the AP (associated AP) associated with the operation of the AP for each AP (see Figure 2 ). It should also be noted that the process name of the associated AP in the associated AP information may also be replaced by, for example, the file path name of the execution file of the associated AP.

[0036] The associated file information is information indicating a file whose integrity should be confirmed when determining the integrity of each AP. In other words, the associated file information is information indicating APs that may be affected when the integrity of a certain file (associated file) is damaged.

[0037] The associated file information is, for example, information indicating, for each AP, a file path of a file (associated file) associated with the operation of the AP (see Figure 3 ).For example, Figure 3 The associated file information shown indicates that if the integrity of AP1 is determined, the integrity of all associated files of the file paths (" / a / b / f1" and " / c / f2") corresponding to AP1 needs to be confirmed. Figure 3 The associated file information shown indicates that when the integrity of any associated file in the file paths “ / a / b / f1” and “ / c / f2” is damaged, the AP that may be affected is “AP1”.

[0038] Correction information is information used to determine the integrity of the associated file. The correction information uses, for example, a digest value of the file data. For example, Figure 4 The correct answer information shown is information that associates the file path of the associated file with the digest value of the file data of the file path. For example, Figure 4 The correct answer information shown is that if the digest value of the associated file of the file path " / a / b / f1" is "123456abcd", it is determined that the integrity of the associated file is not damaged.

[0039] It should also be noted that the correct answer information may also be information indicating a directory path storing the associated file and a file or file path immediately below the directory.

[0040] For example, Figure 5 The correct answer information shown is information that associates the directory path (confirmation target directory path) storing the associated file with one or more file paths immediately below the directory. Figure 5 The correct answer information shown indicates that when the directory path storing the associated file is " / a / b / d1 / ", if it can be confirmed that the file paths " / a / b / d1 / f1", " / a / b / d1 / f5" and " / a / b / d1 / d3" immediately below the directory path are not excessive or insufficient, the integrity of the associated file is not compromised.

[0041] It should be noted that, in addition to the above, information indicating the file owner of the related file, information indicating authority, etc. may be used as the correct answer information.

[0042] Next, the file integrity determination unit 13 will be described. The file integrity determination unit 13 determines the integrity of the associated file by comparing the associated file of the AP with the correct answer information of the associated file.

[0043] For example, the file integrity determination unit 13 determines the associated file information (see Figure 3 ) respectively calculate the summary value of the associated file of AP1, if the calculated summary value is consistent with the correct answer information (refer to Figure 4 ) is consistent with the digest value of the associated file shown in the file integrity determination unit 13, the integrity is determined to be intact. On the other hand, the file integrity determination unit 13 calculates the digest value of the associated file, and if the calculated digest value is consistent with the correct answer information (reference Figure 4 ) is inconsistent with the digest value of the associated file shown in the AP, it is determined that the integrity of the associated file is damaged. In addition, when the file integrity determination unit 13 determines that the integrity of any associated file among the associated files of the AP is damaged, it notifies the control object extraction unit 14 of the associated file determined to be damaged.

[0044] The control object extraction unit 14 extracts the AP to be controlled. Specifically, the control object extraction unit 14 extracts the AP to be controlled from the related file information (refer to Figure 3 ) extracts the AP corresponding to the associated file determined as having damaged integrity by the file integrity determination unit 13. In addition, the control object extraction unit 14 extracts the AP corresponding to the associated file determined as having damaged integrity by the file integrity determination unit 13 from the associated AP information (refer to Figure 2 ) extracts the associated AP corresponding to the extracted AP.

[0045] For example, consider that the file integrity determination unit 13 determines that Figure 3 The integrity of the associated file of the file path " / a / b / f1" in the associated file indicated by the associated file information is damaged.

[0046] In this case, the control object extraction unit 14 extracts Figure 3 The control object extraction unit 14 extracts the AP1 corresponding to the file path " / a / b / f1" from the related file information (refer to Figure 2 ) extracts the associated AP (AP3) corresponding to AP1.

[0047] Furthermore, when there is an associated AP corresponding to the extracted associated AP in the associated AP information, the control target extraction unit 14 also extracts the associated AP. The control target extraction unit 14 repeats such processing until no associated AP can be extracted.

[0048] For example, the control object extraction unit 14 extracts Figure 2 The AP5 as the associated AP of AP3 is extracted from the associated AP information shown in FIG. Figure 2 In the associated AP information shown, AP1 is recorded as the associated AP of AP3, but since AP1 has been extracted, it is not extracted again. Figure 2 In the associated AP information shown, AP3 is recorded as the associated AP of AP5, but AP3 has been extracted and is therefore not extracted again. Figure 2 Then, the control target extraction unit 14 outputs the AP1 extracted from the related file information and the AP3 and AP5 extracted from the related AP information to the AP operation control unit 15 .

[0049] The AP operation control unit 15 performs operation control of the AP extracted by the control target extraction unit 14. For example, when the AP1, AP3, and AP5 extracted by the control target extraction unit 14 are operating, the AP operation control unit 15 stops these APs.

[0050] According to such an AP operation control device 10, it is possible to prevent abnormal operation caused by the AP-related file.

[0051] [Processing process]

[0052] Next, use Figure 6 An example of the processing procedure of the AP operation control device 10 will be described. It should be noted that the description here takes the case where the AP operation control device 10 determines the integrity of the associated file of the activation target AP as an example.

[0053] The file integrity determination unit 13 of the AP operation control device 10 determines the integrity of the files associated with the activation target AP ( S1 ).

[0054] For example, the file integrity determination unit 13 determines the integrity of the file from the associated file information (refer to Figure 3 ) extracts all the associated files of the startup object AP and uses the correct answer information in the storage unit 12 to determine the integrity.

[0055] Here, when the file integrity determination unit 13 determines that the integrity of any of the AP's related files is damaged, the file integrity determination unit 13 notifies the control target extraction unit 14 of the damaged related file. In addition, the file integrity determination unit 13 notifies the AP operation control unit 15 of the determination result that the integrity of the related file is damaged.

[0056] It should also be noted that, when the file integrity determination unit 13 determines that the integrity of any file associated with the AP is not damaged, the AP operation control unit 15 is notified of the determination result that the integrity of any file associated with the AP is not damaged.

[0057] After S1, the control target extraction unit 14 extracts the related APs of the AP corresponding to the related file based on the related file notified from the file integrity determination unit 13 (S2).

[0058] For example, first, the control object extraction unit 14 extracts the relevant file information (see Figure 3 ) extracts the AP corresponding to the associated file notified from the file integrity judgment unit 13 in S1. In addition, the control object extraction unit 14 extracts the AP corresponding to the associated file notified from the file integrity judgment unit 13 in S1. Figure 2 ) Then, the control object extraction unit 14 notifies the AP action control unit 15 of the extracted AP and the associated AP of the AP.

[0059] After S3 , the AP operation control unit 15 performs operation control of the AP extracted by the control target extraction unit 14 ( S3 ).

[0060] For example, when the judgment result notified from the file integrity judgment unit 13 is that the integrity of any associated file in the AP of the startup object is damaged, the AP action control unit 15 causes the AP notified by the control object extraction unit 14 (i.e., the AP of the startup object and the associated APs of the AP) to be transferred to a stopped state.

[0061] On the other hand, when the determination result notified from the file integrity determination unit 13 is that the integrity of any associated file in the AP to be started is not damaged, the AP action control unit 15 starts the AP (transfers to the working state). It should be noted that when the determination result notified from the file integrity determination unit 13 is that the integrity of any associated file in the AP to be started is damaged, when the AP is in the recording mode (that is, the mode in which the action control of the AP is not performed even when the integrity of the associated file of the AP is damaged), the AP action control unit 15 starts the AP (transfers to the working state).

[0062] It should be noted that, in the above example, the AP action control device 10 uses the associated file of the AP of the startup object as the object for the integrity determination, but it is not limited to this. For example, the AP action control device 10 can also use the associated file of the working AP as the object for the integrity determination. In addition, the AP action control device 10 can also use the access to any associated file shown in the associated file information as an opportunity to determine the integrity of the associated file.

[0063] According to the AP operation control device 10 described above, it is possible to prevent abnormal operation caused by abnormality in the AP-related file.

[0064] It should also be noted that when the AP that is the object of action control performed by the above-mentioned AP action control device 10 becomes a redundant structure, the AP action control device 10 may also take the associated AP of the AP as the object of action control only when the integrity of all APs in the redundant structure is damaged.

[0065] For example, consider a situation where AP4 exists as a redundant structure of AP1, and the integrity of AP1 is damaged but the integrity of AP4 is not damaged. Figure 7 In the associated AP information shown, the associated AP of AP1 is AP3, but the integrity of AP4, which is a redundant structure of AP1, is not damaged, so the AP action control device 10 determines that the integrity of AP3 is not damaged. Therefore, the AP action control device 10 does not take AP3 as the object of action control. On the other hand, when the integrity of both AP1 and AP4 is damaged, the AP action control device 10 takes the associated APs of AP1 and AP4, namely AP3 and AP5, as the objects of action control.

[0066] In addition, for example, when there are multiple APs operating in collaboration, it is possible to exclude associated APs whose integrity is obviously damaged but will not have any impact from being controlled. Figure 8 As shown, AP1 and AP3 work in cooperation, and AP2, AP3 and AP4 work in cooperation. For example, even if the integrity of AP4 is damaged, its influence will not affect AP1. In this case, even if the integrity of AP4 is damaged, the AP action control device 10 will not control AP1 as an action object.

[0067] Furthermore, even if the AP operation control device 10 determines that the integrity of any AP is damaged, it may only output an alarm without performing the above-mentioned operation control of the AP.

[0068] [program]

[0069] In addition, it can be realized by installing a program that realizes the functions of the AP action control device 10 described in the above-mentioned embodiment into a desired information processing device (computer). For example, by causing the information processing device to execute the above-mentioned program provided as packaged software or online software, the information processing device can function as the AP action control device 10. The information processing device mentioned here includes desktop or notebook personal computers, cabinet-mounted server computers, etc. In addition, in addition to this, the scope of information processing devices also includes mobile communication terminals such as smart phones, portable phones, PHS (Personal Handyphone System: Personal Handyphone System), and PDA (Personal Digital Assistant: Personal Digital Assistant) and the like. In addition, the AP action control device 10 can also be installed on a cloud server.

[0070] use Figure 7 An example of a computer that executes the above-mentioned program (AP action control program) is described below. Figure 7 As shown, the computer 1000 includes, for example, a memory 1010, a CPU 1020, a hard disk drive interface 1030, a disk drive interface 1040, a serial port interface 1050, a video adapter 1060, and a network interface 1070. These components are connected via a bus 1080.

[0071] The memory 1010 includes a ROM (Read Only Memory) 1011 and a RAM (Random Access Memory) 1012. The ROM 1011 stores, for example, a boot program such as a BIOS (Basic Input Output System). The hard disk drive interface 1030 is connected to the hard disk drive 1090. The disk drive interface 1040 is connected to the disk drive 1100. A removable storage medium such as a magnetic disk or an optical disk is inserted into the disk drive 1100. For example, a mouse 1110 and a keyboard 1120 are connected to the serial port interface 1050. The display 1130 is connected to, for example, a video adapter 1060.

[0072] Here, if Figure 7 As shown, the hard disk drive 1090 stores, for example, an OS 1091, an application program 1092, a program module 1093, and program data 1094. Various data and information described in the above embodiments are stored in the hard disk drive 1090 or the memory 1010, for example.

[0073] Then, the CPU 1020 reads the program module 1093 and program data 1094 stored in the hard disk drive 1090 to the RAM 1012 as needed, and executes the above-mentioned processes.

[0074] In addition, it should be noted that the program module 1093 and program data 1094 involved in the above-mentioned AP action control program are not limited to being stored in the hard disk drive 1090, and may be stored in a removable storage medium, for example, and read out by the CPU 1020 via the disk drive 1100 or the like. Alternatively, the program module 1093 and program data 1094 involved in the above-mentioned program may also be stored in other computers connected via a network such as a LAN or WAN (Wide Area Network), and read out by the CPU 1020 via the network interface 1070.

[0075] Description of symbols

[0076] 10 AP motion control device

[0077] 11. Control Unit

[0078] 12 Storage

[0079] 13. File integrity assessment department

[0080] 14 Control object extraction unit

[0081] 15 AP motion control unit

Claims

1. An application action control device, characterized in that: The application program action control device comprises: a storage unit storing associated file information and associated application information, wherein the associated file information is information indicating an application in correspondence with an associated file, a file whose integrity should be confirmed when determining the integrity of the application, and the associated application information is information indicating an application in correspondence with an associated application, an application that may be affected if the integrity of the application is damaged; A determination unit, configured to determine the integrity of files associated with the application; as well as The control object extraction unit extracts, when it is determined that the integrity of any associated file of the associated files of the application is damaged, an application corresponding to the associated file determined to have damaged integrity from the associated file information as an application to be controlled by the action, and extracts an associated application corresponding to the application from the associated application information, When determining the integrity of the associated file, the determination unit determines that the integrity of the associated file is not damaged if all file paths associated with the associated file immediately below the file path of the associated file are not excessive or insufficient, otherwise, the determination unit determines that the integrity of the associated file is damaged.

2. The application program action control device according to claim 1, characterized in that: The determination unit determines the integrity of the files associated with the application to be started.

3. The application program action control device according to claim 1, characterized in that: The determination unit determines the integrity of files associated with the running application.

4. The application program action control device according to claim 1, characterized in that: The control target extraction unit repeatedly extracts related applications for the extracted related application from the related application information until no new related application can be extracted, if related applications for the extracted related application still exist in the related application information.

5. The application program action control device according to claim 1, characterized in that: The application behavior control device further includes an application behavior control unit that performs behavior control on an application extracted as an application subject of the behavior control.

6. An application action control method, the application action control method being executed by an application action control device, characterized in that: The application program action control method comprises the following steps: Determining the integrity of the associated files of the application by referring to the associated file information which represents the association between the application and the associated files whose integrity should be confirmed when determining the integrity of the application; If it is determined that the integrity of any of the files associated with the application is damaged, extracting, as an application program to be controlled by the action, an application program corresponding to the associated file determined to be damaged in integrity from the associated file information; and extracting a related application corresponding to the application from related application information that shows the application and related applications that are likely to be affected when the integrity of the application is damaged, In the step of determining the integrity of the associated files of the application, when determining the integrity of the associated files, if there is no excess or deficiency in all file paths associated with the associated files immediately below the file path of the associated files, it is determined that the integrity of the associated files is not damaged; otherwise, it is determined that the integrity of the associated files is damaged.

7. A recording medium storing an application action control program, characterized in that: The application action control program causes the computer to execute the following steps: Determining the integrity of the associated files of the application by referring to the associated file information which represents the association between the application and the associated files whose integrity should be confirmed when determining the integrity of the application; If it is determined that the integrity of any of the files associated with the application is damaged, Extracting, as an application program to be controlled by the action, an application program corresponding to the associated file determined to be damaged in integrity from the associated file information; as well as extracting a related application corresponding to the application from related application information that shows the application and related applications that are likely to be affected when the integrity of the application is damaged, In the step of determining the integrity of the associated files of the application, when determining the integrity of the associated files, if there is no excess or deficiency in all file paths associated with the associated files immediately below the file path of the associated files, it is determined that the integrity of the associated files is not damaged; otherwise, it is determined that the integrity of the associated files is damaged.

Images