Abstract: This application relates to an apparatus for identifying an abnormal processor. In one aspect, the apparatus includes a memory information collection part that collects memory region information and dynamic library information of a memory. The apparatus may also include a first identification part that identifies an abnormal processor by using a first machine learning model pre-trained based on the memory region information. The apparatus may further include a second identification part that identifies an abnormal processor by using a second machine learning model pre-trained based on the dynamic library information. The apparatus may further include a determination part that determines a final abnormal processor based on either the abnormal processor identified using the first machine learning model or the abnormal processor identified using the second machine learning model.

Abstract: There is provided an email authorship classification apparatus. The apparatus includes an information analysis unit configured to analyze header field information in an attribute header of each of emails and extract feature field information related to an authorship of each of the emails from each of the header field information and an information conversion unit configured to convert the feature field information into a feature data set for inputting a learning model thereto. The apparatus further includes a learning model unit configured to generate a classification model for classifying the emails by author by applying a learning process to the feature data set.

Abstract: There is provided an email authorship classification apparatus. The apparatus includes an information analysis unit configured to analyze header field information in an attribute header of each of emails and extract feature field information related to an authorship of each of the emails from each of the header field information and an information conversion unit configured to convert the feature field information into a feature data set for inputting a learning model thereto. The apparatus further includes a learning model unit configured to generate a classification model for classifying the emails by author by applying a learning process to the feature data set.