WO2020226189A1 - Method and system for loading executable image into memory - Google Patents

Abstract

Disclosed are a method and system for loading an executable image into memory. A method for loading an executable image according to one embodiment may comprise: a step for storing an executable file on a server; a step for allocating memory space for the executable file in response to an execution request for the executable file; a step for receiving the executable file from the server and loading an executable image for the received executable file into the allocated memory space; and a step for executing a program code of the executable file with reference to the executable image loaded in the allocated memory space.

Description

Method and system for loading executable images in memory

The description below relates to a method and system for loading an executable image into memory.

Through reverse engineering, the operating principle of a specific program can be exposed, or the operating method of a specific program can be changed by using the exposed operating principle. For example, applications distributed to a client terminal can be identified through reverse engineering (reversing), and the function of the application can be stolen through such reverse engineering. In addition, by modifying the original function of the application so that the application operates differently from the intended operation, the service provided through the application and the reliability of the system providing the service may be adversely affected.

In order to protect the program from this reverse engineering process, a method of obfuscation of the executable file to protect the original code and data from being viewed is used. For example, code obfuscation is one of the methods of changing part or all of the program code in order to make it difficult to read code written in a programming language, and provides a countermeasure against reverse engineering by lowering the readability of the code. For example, Korean Patent Registration No. 10-1328012 relates to an application code obfuscation apparatus and method thereof, and a technology for converting an important code and a calling code for calling an important code among codes used in an application into a native code form Is being disclosed.

However, even when obfuscation is applied to executable files (for example, files with extensions such as exe, dll, so, dynlib, apk, ipa, dex, etc.), the contents are always saved in the form of files on disk. Because it exists, there are always problems that may occur in the existing file. For example, the file can be easily copied to another location, and the anti-reversing-related functions that operate at the time of execution of the file are not executed on the disk, so the contents of the file are not restricted. Can be referenced. In addition, there is also a problem in that the location of the loaded memory at the time of execution can be easily checked based on the name of the executable file.

By placing the executable file in memory in the form of an executable image rather than a disk, and loading the program code of the executable image on the memory by referring to the executable image located on the memory when executing the executable file, An executable image loading method capable of preventing malicious users from stealing and/or altering executable files, a computer device that performs the method, a computer in combination with the computer device to execute the method on the computer device A computer program stored in a readable recording medium and a recording medium thereof are provided.

A method of loading an executable image performed by at least one processor included in a computer device, the method comprising: storing, by the at least one processor, an executable file in a server; Allocating, by the at least one processor, a memory space for the executable file in response to an execution request for the executable file; Receiving the executable file from the server by the at least one processor and loading an executable image for the received executable file into the allocated memory space; And executing, by the at least one processor, a program code of the executable file with reference to the executable image loaded in the allocated memory space.

A method of loading an executable image performed by at least one processor included in a computer device, the method comprising: encrypting an executable file by the at least one processor and storing it in a local storage of the computer device; Allocating, by the at least one processor, a memory space for the executable file in response to an execution request for the executable file; Decrypting the encrypted executable file stored in the local storage by the at least one processor and loading an executable image for the decrypted executable file into the allocated memory space; And executing, by the at least one processor, a program code of the executable file with reference to the executable image loaded in the allocated memory space.

In combination with a computer device, there is provided a computer program stored on a computer-readable recording medium for executing the method on the computer device.

There is provided a computer-readable recording medium in which a computer program for executing the method is recorded on a computer device.

It includes at least one processor implemented to execute an instruction readable by a computer device, and stores an executable file in a server by the at least one processor, and in response to an execution request for the executable file, the execution Allocates a memory space for a possible file, receives the executable file from the server, loads an executable image for the received executable file into the allocated memory space, and executes loaded in the allocated memory space It provides a computer device, characterized in that it executes the program code of the executable file with reference to the possible image.

Includes at least one processor implemented to execute a command readable by a computer device, and encrypts an executable file by the at least one processor and stores it in a local storage of the computer device, and executes the executable file In response to a request, a memory space for the executable file is allocated, the encrypted executable file stored in the local storage is decrypted, and an executable image for the decrypted executable file is loaded into the allocated memory space. And executing the program code of the executable file by referring to the executable image loaded in the allocated memory space.

By placing the executable file in memory in the form of an executable image rather than a disk, and loading the program code of the executable image on the memory by referring to the executable image located on the memory when executing the executable file, It can prevent malicious users from stealing and/or tampering with executable files.

1 is a diagram showing an example of a network environment according to an embodiment of the present invention.

2 is a block diagram showing an example of a computer device according to an embodiment of the present invention.

3 is a flowchart showing an example of a method of loading an executable image according to an embodiment of the present invention.

4 is a diagram showing an example of a process of loading an executable image into a memory according to an embodiment of the present invention.

5 is a flowchart showing another example of a method of loading an executable image according to an embodiment of the present invention.

6 is a diagram illustrating an example of a process of loading an executable image into a memory according to an embodiment of the present invention.

7 is a flowchart illustrating an example of a method of executing a program through an executable image according to an embodiment of the present invention.

8 is a diagram illustrating an example of a process of executing a program through an executable image according to an embodiment of the present invention.

Hereinafter, embodiments will be described in detail with reference to the accompanying drawings.

The executable image loading system according to embodiments of the present invention may be implemented through at least one computer device. In this case, a computer program according to an embodiment of the present invention may be installed and driven in the computer device, and the computer device may perform the executable image loading method according to the embodiments of the present invention under control of the driven computer program. I can. The above-described computer program may be combined with a computer device and stored in a computer-readable recording medium to execute the method on a computer.

1 is a diagram showing an example of a network environment according to an embodiment of the present invention. The network environment of FIG. 1 shows an example including a plurality of electronic devices 110, 120, 130, and 140, a plurality of servers 150 and 160, and a network 170. 1 is an example for explaining the present invention, and the number of electronic devices or servers is not limited as in FIG. 1. In addition, the network environment of FIG. 1 is only for describing one example of environments applicable to the embodiments, and the environment applicable to the embodiments is not limited to the network environment of FIG. 1.

The plurality of electronic devices 110, 120, 130, and 140 may be a fixed terminal implemented as a computer device or a mobile terminal. Examples of the plurality of electronic devices 110, 120, 130, 140 include smart phones, mobile phones, navigation, computers, notebook computers, digital broadcasting terminals, personal digital assistants (PDAs), portable multimedia players (PMPs). ), tablet PC, etc. As an example, in FIG. 1, the shape of a smartphone is shown as an example of the electronic device 1 110, but in the embodiments of the present invention, the electronic device 1 110 substantially connects the network 170 using a wireless or wired communication method. Through this, it may mean one of various physical computer devices capable of communicating with other electronic devices 120, 130, and 140 and/or the servers 150 and 160.

The communication method is not limited, and short-range wireless communication between devices as well as a communication method using a communication network (for example, a mobile communication network, a wired Internet, a wireless Internet, a broadcasting network) that the network 170 may include may be included. For example, the network 170 includes a personal area network (PAN), a local area network (LAN), a campus area network (CAN), a metropolitan area network (MAN), a wide area network (WAN), and a broadband network (BBN). , Internet, and the like. In addition, the network 170 may include any one or more of a network topology including a bus network, a star network, a ring network, a mesh network, a star-bus network, a tree or a hierarchical network, etc. Not limited.

Each of the servers 150 and 160 is a computer device or a plurality of computers that communicates with a plurality of electronic devices 110, 120, 130, and 140 through a network 170 to provide commands, codes, files, contents, services, etc. It can be implemented with devices. For example, the server 150 serves as a plurality of electronic devices 110, 120, 130, 140 connected through the network 170 (for example, file distribution service, conversation service, map service, translation service, It may be a system that provides financial services, payment services, social network services, messaging services, search services, mail services, content providing services, etc.).

2 is a block diagram showing an example of a computer device according to an embodiment of the present invention. Each of the electronic devices 110, 120, 130, and 140 described above or each of the servers 150 and 160 may be implemented by the computer apparatus 200 illustrated in FIG. 2.

As illustrated in FIG. 2, the computer device 200 may include a memory 210, a processor 220, a communication interface 230, and an input/output interface 240. The memory 210 is a computer-readable recording medium and may include a permanent mass storage device such as a random access memory (RAM), read only memory (ROM), and a disk drive. Here, a non-destructive large-capacity recording device such as a ROM and a disk drive may be included in the computer device 200 as a separate permanent storage device separated from the memory 210. In addition, an operating system and at least one program code may be stored in the memory 210. These software components may be loaded into the memory 210 from a computer-readable recording medium separate from the memory 210. Such a separate computer-readable recording medium may include a computer-readable recording medium such as a floppy drive, disk, tape, DVD/CD-ROM drive, and memory card. In another embodiment, software components may be loaded into the memory 210 through a communication interface 230 other than a computer-readable recording medium. For example, software components may be loaded into the memory 210 of the computer device 200 based on a computer program installed by files received through the network 170.

The processor 220 may be configured to process instructions of a computer program by performing basic arithmetic, logic, and input/output operations. Commands may be provided to the processor 220 by the memory 210 or the communication interface 230. For example, the processor 220 may be configured to execute a command received according to a program code stored in a recording device such as the memory 210.

The communication interface 230 may provide a function for the computer device 200 to communicate with other devices (eg, storage devices described above) through the network 170. For example, a request, command, data, file, etc., generated by the processor 220 of the computer device 200 according to a program code stored in a recording device such as the memory 210, is transmitted to the network according to the control of the communication interface 230. 170) can be transferred to other devices. Conversely, signals, commands, data, files, etc. from other devices may be received by the computer device 200 through the communication interface 230 of the computer device 200 via the network 170. Signals, commands, data, etc. received through the communication interface 230 may be transmitted to the processor 220 or the memory 210, and the file, etc. may be a storage medium (described above) that the computer device 200 may further include. Permanent storage).

The input/output interface 240 may be a means for an interface with the input/output device 250. For example, the input device may include a device such as a microphone, a keyboard, or a mouse, and the output device may include a device such as a display or a speaker. As another example, the input/output interface 240 may be a means for interfacing with a device in which input and output functions are integrated into one, such as a touch screen. The input/output device 250 may be configured with the computer device 200 and one device.

Further, in other embodiments, the computer device 200 may include fewer or more components than the components of FIG. 2. However, there is no need to clearly show most of the prior art components. For example, the computer device 200 may be implemented to include at least some of the input/output devices 250 described above, or may further include other components such as a transceiver and a database.

3 is a flowchart showing an example of a method of loading an executable image according to an embodiment of the present invention. The method of loading an executable image according to the present embodiment may be performed by the computer apparatus 200 described with reference to FIG. 2. In this case, the processor 220 of the computer device 200 may be implemented to execute a code of an operating system included in the memory 210 or a control instruction according to the code of at least one program. Here, the processor 220 may cause the computer device 200 to perform the steps 310 to 340 included in the method of FIG. 3 according to a control command provided by a code stored in the computer device 200. Can be controlled.

In step 310, the computer device 200 may store the executable file in the server. The computer device 200 according to the present embodiment enables the executable file to be executed without storing the executable file in a local storage of the computer device 200 such as a disk. In other words, the area for protection of the program code of the executable file may be limited to one memory 210 from the local storage and the memory 210 of the computer device 200. As an embodiment for this, the computer device 200 may store the executable file in a server rather than a local storage. Accordingly, the user of the computer device 200 cannot arbitrarily steal or alter the executable file stored in the server. In addition, since the computer program storing the executable file in the server is a program code separate from the program code of the executable file, the user of the computer device 200 cannot know where the executable file is stored. Accordingly, the user of the computer device 200 cannot obtain the program code of the executable file from a local storage such as a disk other than the memory 210.

In step 320, the computer device 200 may allocate a memory space for the executable file in response to an execution request for the executable file. As described above, since the executable file is not stored in the local storage of the computer device 200, the computer device 200 cannot execute the executable file in a general manner. In general, when executing an executable file stored in the computer device 200, the operating system of the computer device 200 allocates and allocates a memory space for execution of the executable file to the memory 210 of the computer device 200 The executable image for the executable file is loaded into the created memory. On the other hand, in this embodiment, since the executable file is stored in the server, the computer device 200 cannot execute the executable file by a conventional method. In addition, since the executable file should not be stored in the local storage of the computer device 200, the computer device 200 directly stores the executable image for the executable file received from the server under the control of the computer program. ), you can allocate memory space for executable files in advance. To this end, the computer device 200 loads an arbitrary file having a size greater than or equal to the first size of the executable file into the memory, and uses the memory space of the address where the arbitrary file is loaded as a memory space for the executable file. At least a portion of the allocated or pre-allocated memory space may be allocated as a memory space for the executable file. In other words, since the computer device 200 does not store an executable file, a memory space must be allocated in advance before receiving the executable file from the server. Accordingly, the computer device 200 may use a memory space allocated through an arbitrary file or may utilize a portion of the previously allocated memory space.

In step 330, the computer device 200 may receive the executable file from the server and load the executable image for the received executable file into the allocated memory space. As described above, in order to prevent the executable file from being stored in the local storage of the computer device 200, the executable file received from the server is also not stored in the local storage of the computer device 200. The computer device 200 may receive an executable file from the server under the control of a computer program, and without storing the received executable file, the executable image for the executable file is directly allocated to the memory 210. Can be loaded into memory space.

Meanwhile, an executable file stored in the server may be encrypted and stored. For example, the computer device 200 may encrypt the executable file in step 310 and store the encrypted executable file in the server. In this case, the computer device 200 may receive and decrypt the encrypted executable file from the server in step 330, and load the executable image for the decrypted executable file in the allocated memory space.

In step 340, the computer device 200 may execute the program code of the executable file by referring to the executable image loaded in the allocated memory space. To this end, the computer device 200 may set at least one of an attribute of an allocated memory space, a reference address, an export address, and an import address based on information stored in the executable file. This setting process will be described in more detail later. In order to execute the program code of the executable file, the computer device 200 may find and execute the start code to be executed first from the program code of the executable file in the executable image or a separate area. Basically, the start code is included in the executable image, but the location of the start code may be changed to a separate area in order to activate a protection module for protecting the executable image. Accordingly, the computer device 200 finds the start code in a separate area such as an executable image or a protection module and executes the start code, so that the program code of the executable file may be executed.

4 is a diagram showing an example of a process of loading an executable image into a memory according to an embodiment of the present invention. 4 shows the electronic device 110 and the server 150. The electronic device 110 may not store the executable file 410 in the storage A 420 of the electronic device 110, but may store the executable file 410 in the storage B 430 of the server 150. For example, in the computer program for a method of loading an executable image installed and driven in the electronic device 110, executable files from files installed in the electronic device 110 are stored in the storage A 420 of the electronic device 110. It is possible to control the electronic device 110 so that it is stored in the storage B 430 of the server 150. In this case, when the execution of the executable file 410 is requested, the electronic device 110 allocates a memory space for the executable file 410 on the memory 440 in advance under the control of the computer program, By receiving the executable file 410 from the server 150, the executable image 450 for the executable file 410 may be loaded in the allocated memory space. Thereafter, the electronic device 110 may execute the program code of the executable file 410 by referring to the executable image 450 loaded in the memory space allocated to the memory 440. Considering the volatility of the memory 440, after the execution of the executable file 410 is terminated, the executable image cannot be obtained through the memory 440.

5 is a flowchart showing another example of a method of loading an executable image according to an embodiment of the present invention. The method of loading an executable image according to the present embodiment may also be performed by the computer device 200 described with reference to FIG. 2. In this case, the processor 220 of the computer device 200 may be implemented to execute a code of an operating system included in the memory 210 or a control instruction according to the code of at least one program. Here, the processor 220 may cause the computer device 200 to perform the steps 510 to 540 included in the method of FIG. 5 according to a control command provided by a code stored in the computer device 200. Can be controlled.

In step 510, the computer device 200 may encrypt the executable file and store it in a local storage of the computer device. The computer device 200 according to the present embodiment stores the executable file in a local storage of the computer device 200 such as a disk, but may encrypt and store the executable file. Therefore, since the encryption of the executable file is performed by the computer program for the executable image loading method according to the present embodiment, irrelevant to the executable file, the user who simply obtained the encrypted executable file randomly selects the executable file. It cannot be stolen or tampered with.

In step 520, the computer device 200 may allocate a memory space for the executable file in response to a request for executing the executable file. When the executable file is encrypted and stored in the computer device 200, the computer device 200 cannot directly execute the executable file. Therefore, the executable file is executed through a general file execution method and is used for the executable file. Unable to allocate memory space. Accordingly, the computer device 200 loads an arbitrary file having a size equal to or larger than the first size of the executable file into the memory 210 of the computer device 200 under the control of the computer program. In addition, the memory space of the address in which such an arbitrary file is loaded may be allocated as a memory space for an executable file. As another example, the computer device 200 may allocate some of the previously allocated memory space as a memory space for an executable file under the control of a computer program.

In step 530, the computer device 200 may decrypt the encrypted executable file stored in the local storage and load the executable image for the decrypted executable file into the allocated memory space. Since the decryption as well as the encryption of the executable file is performed by the computer program for the executable image loading method according to the present embodiment, which is not related to the executable file, the user who simply obtains the encrypted executable file is the executable file. Can not be arbitrarily stolen or altered.

In step 540, the computer device 200 may execute the program code of the executable file by referring to the executable image loaded in the allocated memory space. To this end, the computer device 200 may set at least one of a property of an allocated memory space, a reference address, an external exposure address, and an external reference address based on information stored in the executable file. This setting process will be described in more detail later. In order to execute the program code of the executable file, the computer device 200 may find and execute the start code to be executed first from the program code of the executable file in the executable image or a separate area. Basically, the start code is included in the executable image, but the location of the start code may be changed to a separate area in order to activate a protection module for protecting the executable image. Accordingly, the computer device 200 finds the start code in a separate area such as an executable image or a protection module and executes the start code, so that the program code of the executable file may be executed.

6 is a diagram illustrating an example of a process of loading an executable image into a memory according to an embodiment of the present invention. Unlike in the embodiment of FIG. 4, the encrypted executable file 610 generated by encrypting the executable file 410 in the storage A 430 of the electronic device 110 in the embodiment of FIG. 6 is stored. I can. Encryption of the executable file 410 and decryption (restore) to be described later may be performed under the control of a computer program installed and driven in the electronic device 110. When an execution request for the executable file 410 is transmitted to such a computer program, the electronic device 110 obtains the encrypted executable file 610 stored in the storage A 430 under the control of the computer program and executes the executable file. After restoring 410, the executable image 450 for the restored executable file 410 may be loaded into the memory 440. A method of allocating a memory space on the memory 440 may be the same as in the embodiment of FIG. 4. In other words, since the executable file 410 cannot be stored, the electronic device 110 may allocate a memory space for loading the executable image 450 for the executable file 410 in advance.

7 is a flowchart illustrating an example of a method of executing a program through an executable image according to an embodiment of the present invention. Steps 710 to 740 of FIG. 7 may be performed while being included in step 340 described with reference to FIG. 3 or step 540 described with reference to FIG. 5. As already described, in executing the program code of the executable file by referring to the executable image loaded in the allocated memory space, the computer device 200 may determine the allocated memory space based on information stored in the executable file. At least one of a property, a reference address, an external exposure address, and an external reference address can be set. Steps 710 to 740 of FIG. 7 describe an example of such a setting process.

In operation 710, the computer device 200 may set the attribute of the allocated memory space to at least one of read, write, and execute. As an example, the computer device 200 may set properties (read, write, execute) of the memory area according to the properties of each segment defined in the executable image. As described above, when a separate area such as a protection module is included in the executable file, the computer device 200 may set the property of each memory area according to the property of each segment stored in the separate area. The attributes of these segments can be obtained by referring to the executable file. In other words, after the executable file is received from the server in the embodiment of FIG. 3 or after the executable file encrypted in the embodiment of FIG. 5 is decrypted, the attribute of the segment is obtained from the received or decrypted executable file. I can.

In step 720, the computer device 200 may set the reference address by modifying the address of the code to a relative address from the memory base address using relocation information. For example, the computer device 200 may modify the address of the code to a relative address from the current memory start address by using relocation information defined in the executable image. In addition, as described above, when a separate area such as a protection module is included in the executable file, the computer device 200 uses the relocation information stored in the separate area to transfer the code to a relative address from the current memory start address. Address can be modified.

In step 730, the computer device 200 may set an address for external exposure in the executable image. For example, the computer device 200 may modify the address of a function or variable to be exposed to an address corresponding to the allocated memory space.

In step 740, the computer device 200 may set an address to be externally referenced in the executable image. For example, the computer device 200 may obtain the current address of the referenced external library (an external library loaded on a memory in the form of an executable image) and correct the reference address. To this end, the computer device 200 may obtain the address of an external library by using a system API, or by inquiring the location and exposure information of the external library directly from the memory to obtain the address.

As described above, after at least one of an attribute of the allocated memory space, a reference address, an external exposure address, and an external reference address is set based on the information stored in the executable file, step 340 of FIG. 3 or step ( As in 540), the program code of the executable file may be executed with reference to the executable image loaded in the allocated memory space.

8 is a diagram illustrating an example of a process of executing a program through an executable image according to an embodiment of the present invention. 8 illustrates an executable image 1 810 and an executable image 2 820 loaded on a memory according to a method of loading an executable image according to embodiments of the present invention. First, the computer device 200 may set a property of a corresponding memory space according to each property of each segment (Code, Data, Import, Export, Relocation). For example, initially, for loading an executable image, the property of the entire memory space may have a write property, but after that, the'Code' segment and the'Data' segment may be set as a read property. . In addition, the computer device 200 may set a reference address by modifying the address of the code to a relative address from the base address of the memory by using relocation information defined in the executable image 1 810. . The code here may mean a function of the'Code' segment or a variable of the'Data' segment. In addition, the computer device 200 may modify the address of a function or variable to be exported to a corresponding address in the allocated memory, and obtains the current address of an external library such as executable image 2 (820). By modifying the reference address, you can set the address for an external reference (Import). Thereafter, the computer device 200 may execute the executable file by finding and executing the start code to be executed first in the executable file.

As described above, according to embodiments of the present invention, the executable file is located in memory in the form of an executable image rather than a disk, and when the executable file is executed, the executable image is referred to the executable image located on the memory. By loading the program code in memory, it is possible to prevent malicious users from stealing and/or tampering with executable files.

The system or device described above may be implemented as a hardware component or a combination of a hardware component and a software component. For example, the devices and components described in the embodiments are, for example, a processor, a controller, an arithmetic logic unit (ALU), a digital signal processor, a microcomputer, a field programmable gate array (FPGA). , A programmable logic unit (PLU), a microprocessor, or any other device capable of executing and responding to instructions, such as one or more general purpose computers or special purpose computers. The processing device may execute an operating system (OS) and one or more software applications executed on the operating system. In addition, the processing device may access, store, manipulate, process, and generate data in response to the execution of software. For the convenience of understanding, although it is sometimes described that one processing device is used, one of ordinary skill in the art, the processing device is a plurality of processing elements and/or a plurality of types of processing elements. It can be seen that it may include. For example, the processing device may include a plurality of processors or one processor and one controller. In addition, other processing configurations are possible, such as a parallel processor.

The software may include a computer program, code, instructions, or a combination of one or more of these, configuring the processing unit to behave as desired or processed independently or collectively. You can command the device. Software and/or data may be interpreted by a processing device or to provide instructions or data to a processing device, of any type of machine, component, physical device, virtual equipment, computer storage medium or device. Can be embodyed. The software may be distributed over networked computer systems and stored or executed in a distributed manner. Software and data may be stored on one or more computer-readable recording media.

The method according to the embodiment may be implemented in the form of program instructions that can be executed through various computer means and recorded in a computer-readable medium. The computer-readable medium may include program instructions, data files, data structures, and the like alone or in combination. The medium may be one that continuously stores a program executable by a computer, or temporarily stores a program for execution or download. In addition, the medium may be a variety of recording means or storage means in a form in which a single piece of hardware or several pieces of hardware are combined, but is not limited to a medium directly connected to a computer system, and may be distributed on a network. Examples of media include magnetic media such as hard disks, floppy disks, and magnetic tapes, optical recording media such as CD-ROMs and DVDs, magnetic-optical media such as floptical disks, and And a ROM, RAM, flash memory, and the like, and may be configured to store program instructions. In addition, examples of other media include an app store that distributes applications, a site that supplies or distributes various software, and a recording medium or storage medium managed by a server. Examples of the program instructions include not only machine language codes such as those produced by a compiler, but also high-level language codes that can be executed by a computer using an interpreter or the like.

As described above, although the embodiments have been described by the limited embodiments and drawings, various modifications and variations are possible from the above description by those of ordinary skill in the art. For example, the described techniques are performed in a different order from the described method, and/or components such as a system, structure, device, circuit, etc. described are combined or combined in a form different from the described method, or other components Alternatively, even if substituted or substituted by an equivalent, an appropriate result can be achieved.

Therefore, other implementations, other embodiments, and equivalents to the claims also fall within the scope of the following claims.

Claims (17)

A computer program stored in a computer-readable recording medium for executing an executable image loading method in combination with a computer device on the computer device, The above executable image loading method, Storing the executable file in the server; Allocating a memory space for the executable file in response to an execution request for the executable file; Receiving the executable file from the server and loading an executable image for the received executable file into the allocated memory space; And Executing the program code of the executable file by referring to the executable image loaded in the allocated memory space Including Computer program, characterized in that. The method of claim 1, And the executable file received from the server is not stored in a local storage of the computer device. The method of claim 1, The storing step, Encrypting the executable file and storing the encrypted executable file in the server, The loading step, Receiving and decrypting the encrypted executable file from the server, and loading an executable image for the decrypted executable file into the allocated memory space Computer program, characterized in that. A computer program stored in a computer-readable recording medium for executing an executable image loading method in combination with a computer device on the computer device, The above executable image loading method, Encrypting the executable file and storing it in a local storage of the computer device; Allocating a memory space for the executable file in response to an execution request for the executable file; Decrypting the encrypted executable file stored in the local storage and loading an executable image for the decrypted executable file into the allocated memory space; And Executing the program code of the executable file by referring to the executable image loaded in the allocated memory space Including Computer program, characterized in that. The method of claim 1 or 4, The allocating step, An arbitrary file having a size equal to or greater than the first size of the executable file is loaded into memory, and the memory space of the address where the arbitrary file is loaded is allocated as a memory space for the executable file, or a previously allocated memory space Allocating at least some of them as memory space for the executable file Computer program, characterized in that. The method of claim 1 or 4, The executing step, Setting at least one of an attribute of the allocated memory space, a reference address, an export address, and an import address based on information stored in the executable file Computer program, characterized in that. The method of claim 1 or 4, The executing step, Setting an attribute of the allocated memory space to at least one of read, write, and execute; Setting a reference address by modifying an address of a code to a relative address from a base address of a memory using relocation information; Setting an address for external exposure in the executable image; And Setting an address to be externally referenced in the executable image Including Computer program, characterized in that. The method of claim 1 or 4, The executing step, Finding and executing a start code to be executed first in the program code of the executable file in the executable image or a separate area Computer program, characterized in that. In the method of loading an executable image performed by at least one processor included in a computer device, Storing an executable file in a server by the at least one processor; Allocating, by the at least one processor, a memory space for the executable file in response to an execution request for the executable file; Receiving the executable file from the server by the at least one processor and loading an executable image for the received executable file into the allocated memory space; And Executing, by the at least one processor, the program code of the executable file with reference to the executable image loaded in the allocated memory space An executable image loading method comprising a. The method of claim 9, The executable image loading method, characterized in that the executable file received from the server is not stored in a local storage of the computer device. The method of claim 9, The storing step, Encrypting the executable file and storing the encrypted executable file in the server, The loading step, Receiving and decrypting the encrypted executable file from the server, and loading an executable image for the decrypted executable file into the allocated memory space An executable image loading method, characterized in that. In the method of loading an executable image performed by at least one processor included in a computer device, Encrypting the executable file by the at least one processor and storing it in a local storage of the computer device; Allocating, by the at least one processor, a memory space for the executable file in response to an execution request for the executable file; Decrypting the encrypted executable file stored in the local storage by the at least one processor and loading an executable image for the decrypted executable file into the allocated memory space; And Executing, by the at least one processor, the program code of the executable file with reference to the executable image loaded in the allocated memory space An executable image loading method comprising a. The method of claim 9 or 12, The allocating step, An arbitrary file having a size equal to or greater than the first size of the executable file is loaded into memory, and the memory space of the address where the arbitrary file is loaded is allocated as a memory space for the executable file, or a previously allocated memory space Allocating at least a portion of the executable image as a memory space for the executable file. The method of claim 9 or 12, The executing step, Setting at least one of an attribute of the allocated memory space, a reference address, an export address, and an import address based on information stored in the executable file An executable image loading method, characterized in that. The method of claim 9 or 12, The executing step, Setting an attribute of each segment of the allocated memory space to at least one of read, write, and execute; Setting a reference address by modifying an address of a code to a relative address from a base address of a memory using relocation information; Setting an address for external exposure in the executable image; And Setting an address to be externally referenced in the executable image Including An executable image loading method, characterized in that. The method of claim 9 or 12, The executing step, Finding and executing a start code to be executed first in the program code of the executable file in the executable image or a separate area An executable image loading method, characterized in that. A computer-readable recording medium having a computer program recorded thereon for executing the method of any one of claims 9 to 12 on a computer device.

Images