Apparatus and method for guaranteeing safe execution of shell command in embedded system

1. An apparatus for guaranteeing safe execution of a shell command in an embedded system, comprising:

a shell command detection part configured to detect an execution request of the shell command;

a shell command execution control part configured to control execution of the shell command according to whether a password based on safety is provided for the detected shell command,

a shell command examination part configured to examine a possibility of hacking behavior for the execution of shell command, and

wherein, if the shell command is a safe command as a result of a safety checking of the shell command, the safe command is executed, and, if the shell command is deemed unsafe as the result of the safety checking, the shell command is verified as safe through both a password check and a hacking examination executed in sequence.

2. The apparatus of claim 1 , wherein the shell command detection part detects a shell command execution request input through an administrator account.

3. The apparatus of claim 1 , wherein the shell command execution control part determines the safety of the detected shell command using a shell command safety grade table.

4. The apparatus of claim 3 , wherein the shell command safety grade table includes safety and a password level value based on the shell command.

5. The apparatus of claim 4 , wherein the shell command execution control part requests a user to input a password level and a password of the shell command if the safety of the detected shell command is determined to be “unsafe”.

6. The apparatus of claim 5 , wherein the shell command execution control part includes a password table in which a user key value based on the password level and a secret key value are stored, generates the user key value using the password value input by the user and the secret key value stored in the table according to the level, and determines whether the user password is correct by comparing the generated user key value and the user key value stored in the table according to the level.

7. The apparatus of claim 1 , wherein the hacking examination examines whether the shell command for which the password is provided is a command for hacking, and whether a target file accessed by the command is a security file.

8. The apparatus of claim 7 , wherein the hacking examination examines whether the shell command is in a hacking command list, examines whether the target file is in a security file list if the shell command is in the hacking command list, and blocks execution of the shell command if the target file is in the security file list.

9. A method for guaranteeing safe execution of a shell command in an embedded system, the method comprising:

executing in a computing system non-transitory computer program code stored on storage media, wherein the non-transitory computer program code includes instructions for:

detecting an execution request of the shell command;

controlling execution of the shell command according to whether a password based on safety is provided for the detected shell command;

examining a possibility of hacking behavior for the execution of the shell command, and

wherein, if the shell command is a safe command as a result of a safety checking of the shell command, the safe command is executed, and, if the shell command is deemed unsafe as the result of the safety checking, the shell command is verified as safe through both a password check and a hacking behavior examination executed in sequence.

10. The method of claim 9 , wherein the examining of the possibility of hacking behavior for the execution of the shell command comprises:

checking whether the shell command is in a hacking command list; and

determining whether a target file accessed by the shell command is a system security file when the shell command is in the hacking command list.