Abstract: A display apparatus includes a communicator configured to communicate with an external apparatus, a memory storing one or more instructions, and a processor. The processor may be configured to execute the one or more instructions to control the communicator to receive data regarding frames forming each of a plurality of pieces of broadcast content in a normal mode; extract first object information based on the data; and provide information about broadcast content corresponding to a keyword of interest of a user from among the pieces of broadcast content, based on the first object information. When entering a suspended mode from the normal mode, the processor may be configured to control the communicator to receive second object information in the suspended mode, and provide the information about the broadcast content corresponding to the keyword of interest from among the pieces of broadcast content, based on the second object information.

Abstract: A display apparatus includes a communicator configured to communicate with an external apparatus, a memory storing one or more instructions, and a processor. The processor may be configured to execute the one or more instructions to control the communicator to receive data regarding frames forming each of a plurality of pieces of broadcast content in a normal mode; extract first object information based on the data; and provide information about broadcast content corresponding to a keyword of interest of a user from among the pieces of broadcast content, based on the first object information. When entering a suspended mode from the normal mode, the processor may be configured to control the communicator to receive second object information in the suspended mode, and provide the information about the broadcast content corresponding to the keyword of interest from among the pieces of broadcast content, based on the second object information.

Abstract: Disclosed is a method for extracting an executable code by dumping a working memory on a storage memory at the moment when an Android platform loads an executable code on the working memory after decrypting the executable code. The method includes reading a name of a user-designated process from a dump configuration file of the storage memory; checking a name of an execution process running on the emulator; determining whether the name of the user-designated process is identical to the name of the execution process; determining whether a name of a parent process of the execution process is “zygote”, when the name of the user-designated process is identical to the name of the execution process; and dumping an executable code of the execution process on a designated directory of the storage memory when the name of the parent process of the execution process is “zygote”.