Information processing apparatus, information processing method, and storage medium
An information processing apparatus switches alteration detection processing depending on timing of execution of alteration detection to perform alteration detection processing for each file to be accessed to detect an alteration in an extended application, and switches alteration detection execution determination processing depending on a type of access to an extended application package.
1. An information processing apparatus comprising:
a storage; and
one or more controllers including one or more processors and one or more memories, the one or more controllers configured to:
store an application package including a plurality of scripts in the storage;
load a script to execute a function from the plurality of scripts included in the application package, the application package including the script which is to be loaded to execute the function and a script which is not to be loaded to execute the function;
detect an alteration of the script to be loaded based on digest information calculated from the script to be loaded and digest information corresponding to the scripts stored in the storage;
execute the function using the loaded script, on condition that an alteration of the script to be loaded is not detected,
wherein the one or more controllers do not execute detecting an alteration of the script which is not to be loaded to execute the function included in the application package;
when the script to execute the function included in the application package is loaded to a virtual machine, record a fact that the script has been loaded; and
before the script is loaded to the virtual machine, determine whether the script has been loaded based on the fact, and cause a detection of alteration of the loaded script not to be performed if the script is already loaded.
2. The information processing apparatus according to claim 1 , wherein the one or more controllers are further configured to provide a message based on a result of comparing the digest information calculated from the script to be loaded and the digest information corresponding to the scripts stored in the storage.
3. The information processing apparatus according to claim 1 , wherein the one or more controllers are further configured to:
open a file archived in a package file; and
determine whether to execute alteration detection processing depending on a type of access to the file.
4. The information processing apparatus according to claim 1 , wherein the one or more controllers are further configured to:
when a file archived in a package file is read, store data of the read file in a buffer memory;
when alteration detection processing is performed on a file archived in the package file, record a fact that the file has undergone an alteration check; and
open a file archived in the package file without alteration detection processing if data of the file has undergone buffering and an alteration check.
5. The information processing apparatus according to claim 1 , wherein the one or more controllers are further configured to cause a file not to be opened based on a result of comparing the digest information calculated from the script to be loaded and the digest information corresponding to the scripts stored in the storage.
6. The information processing apparatus according to claim 1 , wherein individual digest information about a file stored beforehand in the storage is calculated at time of installation of the application package.
7. The information processing apparatus according to claim 1 , wherein the one or more controllers are further configured to report that an archived file has been altered, if individual digest information about a file differs from individual digest information about a file stored beforehand in the storage based on a result of comparing the digest information calculated from the script to be loaded and the digest information corresponding to the scripts stored in the storage.
8. The information processing apparatus according to claim 1 , wherein the one or more controllers are further configured to calculate digest information about the application package when the information processing apparatus is activated, and detect an alteration of the application package based on the calculated digest information and digest information corresponding to the application package stored in the storage.
9. An information processing method comprising:
storing, in a storage, an application package including a plurality of scripts in the storage;
loading a script to execute a function from the plurality of scripts included in the application package, the application package including the script which is to be loaded to execute the function and a script which is not to be loaded to execute the function;
detecting an alteration of the script to be loaded based on digest information calculated from the script to be loaded and digest information corresponding to the scripts stored in the storage;
executing the function using the loaded script, on condition that an alteration of the script to be loaded is not detected,
wherein detecting an alteration of the script which is not to be loaded to execute the function included in the application package is not executed;
when the script to execute the function included in the application package is loaded to a virtual machine, recording a fact that the script has been loaded; and
before the script is loaded to the virtual machine, determining whether the script has been loaded based on the fact, and causing a detection of alteration of the loaded script not to be performed if the script is already loaded.
10. A non-transitory computer-readable storage medium storing a program for causing a computer to execute an information processing method in an information processing apparatus, the information processing method comprising:
storing, in a storage, an application package including a plurality of scripts in the storage;
loading a script to execute a function from the plurality of scripts included in the application package, the application package including the script which is to be loaded to execute the function and a script which is not to be loaded to execute the function;
detecting an alteration of the script to be loaded based on digest information calculated from the script to be loaded and digest information corresponding to the scripts stored in the storage;
executing the function using the loaded script, on condition that an alteration of the script to be loaded is not detected,
wherein detecting an alteration of the script which is not to be loaded to execute the function included in the application package is not executed;
when the script to execute the function included in the application package is loaded to a virtual machine, recording a fact that the script has been loaded; and
before the script is loaded to the virtual machine, determining whether the script has been loaded based on the fact, and causing a detection of alteration of the loaded script not to be performed if the script is already loaded.