Provided is a computer security apparatus and a method using a security input device driver. Data inputted through a data input unit is directly encrypted at the security input device driver without passing through an OS input device driver supporting in an OS. Thereby, the data inputted through the data input unit can be prevented from being illegally acquired by any hacking program from the beginning.