CN105224862A - A kind of hold-up interception method of office shear plate and device - Google Patents
A kind of hold-up interception method of office shear plate and device Download PDFInfo
- Publication number
- CN105224862A CN105224862A CN201510624553.9A CN201510624553A CN105224862A CN 105224862 A CN105224862 A CN 105224862A CN 201510624553 A CN201510624553 A CN 201510624553A CN 105224862 A CN105224862 A CN 105224862A
- Authority
- CN
- China
- Prior art keywords
- shear plate
- office
- eigenwert
- api
- detecting
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
- G06F21/52—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/03—Indexing scheme relating to G06F21/50, monitoring users, programs or devices to maintain the integrity of platforms
- G06F2221/032—Protect output to user by software means
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Software Systems (AREA)
- Theoretical Computer Science (AREA)
- Computer Hardware Design (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Management, Administration, Business Operations System, And Electronic Commerce (AREA)
Abstract
The invention provides a kind of hold-up interception method of office shear plate, the method comprises: to detecting for the application programming interface API obtaining shear plate content in operating system; When API described in process transfer having been detected, tackling this process and having obtained current process transfer storehouse; Detect in described process transfer storehouse and whether there is the eigenwert that office operates shear plate; The eigenwert that described office operates shear plate if exist, then judge the operation that there is office shear plate in this process, and refuse the operation of described office shear plate.The invention provides a kind of blocking apparatus of office shear plate, comprising: detecting unit, storehouse acquiring unit, eigenwert detecting unit and operation refusal unit.The present invention can control office shear plate process, prevents enciphered data from illegally being copied out, efficiently solves the Security Control Problem of office shear plate.
Description
Technical field
The present invention relates to computer processing technology field, particularly relate to a kind of hold-up interception method and device of office shear plate.
Background technology
In electronic document transparent encryption product, need carry out certain operation behavior to the document of encryption in the process opened and used and protect, wherein shear plate is a very important aspect.Common operation chooses the content right button that will copy to copy or by lower keyboard Ctrl+C Macintosh, and then in another process, right button is pasted or the content chosen pasted in other process by lower keyboard Ctrl+V Macintosh.
The shear plate function interface of what behavior more than general text software was walked is WINDOWS open system, therefore only needs to carry out interception to relevant function interface and just can reach and prevent enciphered data by the problem illegally examined out.But the stickup that copies of Office software is the transmission being carried out data by own shear plate mode, prevents enciphered data by the problem illegally copied out so the shear plate function interface of usual intercepting system can not reach.
Office uses maximum office softwares usually, if its shear plate operation behavior can not be accurately controlled, so also just loses meaning to the encryption of office document, because the data of encryption can easy to doly copy in unencrypted file.
Summary of the invention
For the defect of prior art, the invention provides a kind of hold-up interception method and device of office shear plate, can control office shear plate process, prevent enciphered data from illegally being copied out, efficiently solve the Security Control Problem of office shear plate.
First aspect, the invention provides a kind of hold-up interception method of office shear plate, the method comprises:
To detecting for the application programming interface API obtaining shear plate content in operating system;
When API described in process transfer having been detected, tackling this process and having obtained current process transfer storehouse;
Detect in described process transfer storehouse and whether there is the eigenwert that office operates shear plate;
The eigenwert that described office operates shear plate if exist, then judge the operation that there is office shear plate in this process, and refuse the operation of described office shear plate.
Preferably, the method also comprises:
The eigenwert that described office operates shear plate if do not exist, then let pass to this process.
Preferably, described to detecting for the API obtaining shear plate content in system, comprising:
Adopt Hook Technique HOOK to detecting for the API obtaining shear plate content in system, and the process calling described API is tackled.
Preferably, detect in described process transfer storehouse and whether there is the eigenwert that office operates shear plate, comprising:
Adopt process stacks back trace technique, in this process transfer storehouse, detect the eigenwert that office operates shear plate.
Preferably, the method also comprises:
Program corresponding for described office shear plate hold-up interception method is packaged in application extensions Dll interface document.
Preferably, the method also comprises:
Described Dll interface document is positioned in described system in the already present process and the new process started needing to protect.
Second aspect, the invention provides a kind of blocking apparatus of office shear plate, this device comprises:
Detecting unit, for detecting for the API obtaining shear plate content in operating system;
Storehouse acquiring unit, for when detect in process call described API time, tackle this process and obtain current process transfer storehouse;
Whether eigenwert detecting unit, exist for detecting in described process transfer storehouse the eigenwert that office operates shear plate;
Operation refusal unit, for when there is described office and operating the eigenwert of shear plate, judges the operation that there is office shear plate in this process, and refuses the operation of described office shear plate.
Preferably, this device also comprises clearance unit, for:
The eigenwert that described office operates shear plate if do not exist, then let pass to this process.
Preferably, described detecting unit, for:
Adopt Hook Technique HOOK to detecting for the API obtaining shear plate content in system, and the process calling described API is tackled.
Preferably, described eigenwert detecting unit, for:
Adopt process stacks back trace technique, in this process transfer storehouse, detect the eigenwert that office operates shear plate.
As shown from the above technical solution, the invention provides a kind of hold-up interception method and device of office shear plate, by analyzing the behavior of pasting of the copy of office software, and in conjunction with process Stack back trace technology, efficiently solve the Security Control Problem of office shear plate, can control office shear plate process, prevent enciphered data from illegally being copied out.
Accompanying drawing explanation
In order to be illustrated more clearly in disclosure embodiment or technical scheme of the prior art, be briefly described to the accompanying drawing used required in embodiment or description of the prior art below, apparently, accompanying drawing in the following describes is only embodiments more of the present disclosure, for those of ordinary skill in the art, under the prerequisite not paying creative work, other accompanying drawing can also be obtained according to these figure.
Fig. 1 is the schematic flow sheet of the hold-up interception method of a kind of office shear plate that one embodiment of the invention provides;
Fig. 2 is the structural representation of the blocking apparatus of a kind of office shear plate that another embodiment of the present invention provides.
Embodiment
Below in conjunction with the accompanying drawing in disclosure embodiment, be clearly and completely described the technical scheme in disclosure embodiment, obviously, described embodiment is only disclosure part embodiment, instead of whole embodiments.Based on the embodiment in the disclosure, those of ordinary skill in the art are not making the every other embodiment obtained under creative work prerequisite, all belong to the scope of disclosure protection.
As shown in Figure 1, the schematic flow sheet of the hold-up interception method of a kind of office shear plate provided for the disclosure one embodiment, the method comprises the steps:
S1: to detecting for the application programming interface (ApplicationProgrammingInterface is called for short API) obtaining shear plate content in operating system.
Specifically, HOOK can be carried out to the API (GetClipboardData) of the acquisition shear plate content provided of system.Namely adopt Hook Technique HOOK to detecting for the API obtaining shear plate content in system, and the process calling described API is tackled.So, undertaken monitoring and connecting by the interface of pair correlation function, can realize analysing in depth the behavior of pasting of the copy of office software.
S2: when API described in process transfer having been detected, tackles this process and obtains current process transfer storehouse.
S3: detect in described process transfer storehouse and whether there is the eigenwert that office operates shear plate.
Specifically, the eigenwert that office operates shear plate whether is there is by inquiring about in the process transfer storehouse that obtains in above-mentioned steps, can monitor the behavior of pasting of the copy of office, can control office shear plate process, prevent enciphered data from illegally being copied out.
S4: the eigenwert that described office operates shear plate if exist, then judge the operation that there is office shear plate in this process, and refuse the operation of described office shear plate.
Will be understood that, the method also comprises the steps:
The eigenwert that described office operates shear plate if do not exist, then let pass to this process.
Specifically, operate the eigenwert of shear plate when there is not office, then show that this process does not exist the operation of office shear plate, therefore anyly forbid without the need to carrying out this process or refuse to operate.
As can be seen here, the present embodiment uses the technology of the systems cleave plate interception usually adopted, but on the basis of this technology, add the behavioral analysis technology of software, and analysis result is carried out modeling and Stack back trace combine with technique thus realize the target of protection.Compared with the systems cleave board monitoring technology usually adopted, technical solution of the present invention wants complicated many, is not only the use of API Interception Technology, has also used process stacks back trace technique and behavioural analysis experience.On coding realizes, the complicacy of logic is very large, needs to do stricter treatment and analysis to some details.
Specifically, detect in described process transfer storehouse in step S1 and whether there is the eigenwert that office operates shear plate, specifically can comprise:
Adopt process stacks back trace technique, in this process transfer storehouse, detect the eigenwert that office operates shear plate.
Further, the method also comprises the steps:
Program corresponding for described office shear plate hold-up interception method is packaged in application extensions Dll interface document.
So, based on the Dll interface document that this step obtains, can install it for installation procedure, realize the protection to process.
Further, the method also comprises the steps:
Described Dll interface document is positioned in described system in the already present process and the new process started needing to protect.
As can be seen here; when installation procedure is installed packaged logic module; Dll interface document is injected all already present processes of carrying out and newly starting needing protection; during the corresponding program of each execution; this Dll interface document will be called, to realize monitoring the copy behavior of pasting of encryption office document and protecting.
Present embodiments provide a kind of hold-up interception method of office shear plate, by analyzing the behavior of pasting of the copy of office software, and in conjunction with process Stack back trace technology, efficiently solve the Security Control Problem of office shear plate, can control office shear plate process, prevent enciphered data from illegally being copied out.
As shown in Figure 2, the structural representation of the blocking apparatus of a kind of office shear plate provided for another embodiment of the present invention, this device comprises: detecting unit 201, storehouse acquiring unit 202, eigenwert detecting unit 203 and operation refusal unit 204.Wherein:
Detecting unit 201, for detecting for the API obtaining shear plate content in operating system;
Storehouse acquiring unit 202, for when detect in process call described API time, tackle this process and obtain current process transfer storehouse;
Whether eigenwert detecting unit 203, exist for detecting in described process transfer storehouse the eigenwert that office operates shear plate;
Operation refusal unit 204, for when there is described office and operating the eigenwert of shear plate, judges the operation that there is office shear plate in this process, and refuses the operation of described office shear plate.
In the present embodiment, this device also comprises clearance unit, for:
The eigenwert that described office operates shear plate if do not exist, then let pass to this process.
In the present embodiment, described detecting unit 201, for:
Adopt Hook Technique HOOK to detecting for the API obtaining shear plate content in system, and the process calling described API is tackled.
In the present embodiment, described eigenwert detecting unit 203, for:
Adopt process stacks back trace technique, in this process transfer storehouse, detect the eigenwert that office operates shear plate.
The blocking apparatus of the office shear plate that the present embodiment provides, well solve office document use in a very large potential safety hazard, be the requisite technology of electronic document safety product defense controls, the development and improvement for electronic document safety product is significant.
For device embodiment, due to itself and embodiment of the method basic simlarity, so description is fairly simple, relevant part illustrates see the part of embodiment of the method.
Should be noted that, in all parts of system of the present disclosure, the function that will realize according to it and logical partitioning has been carried out to parts wherein, but, the disclosure is not limited to this, can repartition all parts as required or combine, such as, can be single parts by some component combinations, or some parts can be decomposed into more subassembly further.
All parts embodiment of the present disclosure with hardware implementing, or can realize with the software module run on one or more processor, or realizes with their combination.It will be understood by those of skill in the art that the some or all functions that microprocessor or digital signal processor (DSP) can be used in practice to realize according to the some or all parts in the system of disclosure embodiment.The disclosure can also be embodied as part or all equipment for performing method as described herein or device program (such as, computer program and computer program).Realizing program of the present disclosure and can store on a computer-readable medium like this, or the form of one or more signal can be had.Such signal can be downloaded from internet website and obtain, or provides on carrier signal, or provides with any other form.
It should be noted that above-described embodiment is described the disclosure instead of limits the disclosure, and those skilled in the art can design alternative embodiment when not departing from the scope of claims.In the claims, any reference symbol between bracket should be configured to limitations on claims.Word " comprises " not to be got rid of existence and does not arrange element in the claims or step.Word "a" or "an" before being positioned at element is not got rid of and be there is multiple such element.The disclosure can by means of including the hardware of some different elements and realizing by means of the computing machine of suitably programming.In the unit claim listing some devices, several in these devices can be carry out imbody by same hardware branch.Word first, second and third-class use do not represent any order.Can be title by these word explanations.
Above embodiment is only suitable for the disclosure is described; and not to restriction of the present disclosure; the those of ordinary skill of relevant technical field; when not departing from spirit and scope of the present disclosure; can also make a variety of changes and modification; therefore all equivalent technical schemes also belong to category of the present disclosure, and scope of patent protection of the present disclosure should be defined by the claims.
Claims (10)
1. a hold-up interception method for office shear plate, is characterized in that, the method comprises:
To detecting for the application programming interface API obtaining shear plate content in operating system;
When API described in process transfer having been detected, tackling this process and having obtained current process transfer storehouse;
Detect in described process transfer storehouse and whether there is the eigenwert that office operates shear plate;
The eigenwert that described office operates shear plate if exist, then judge the operation that there is office shear plate in this process, and refuse the operation of described office shear plate.
2. method according to claim 1, is characterized in that, the method also comprises:
The eigenwert that described office operates shear plate if do not exist, then let pass to this process.
3. method according to claim 1, is characterized in that, described to detecting for the API obtaining shear plate content in system, comprising:
Adopt Hook Technique HOOK to detecting for the API obtaining shear plate content in system, and the process calling described API is tackled.
4. method according to claim 1, is characterized in that, detects and whether there is the eigenwert that office operates shear plate, comprising in described process transfer storehouse:
Adopt process stacks back trace technique, in this process transfer storehouse, detect the eigenwert that office operates shear plate.
5. method according to claim 1, is characterized in that, the method also comprises:
Program corresponding for described office shear plate hold-up interception method is packaged in application extensions Dll interface document.
6. method according to claim 5, is characterized in that, the method also comprises:
Described Dll interface document is positioned in described system in the already present process and the new process started needing to protect.
7. a blocking apparatus for office shear plate, is characterized in that, this device comprises:
Detecting unit, for detecting for the API obtaining shear plate content in operating system;
Storehouse acquiring unit, for when detect in process call described API time, tackle this process and obtain current process transfer storehouse;
Whether eigenwert detecting unit, exist for detecting in described process transfer storehouse the eigenwert that office operates shear plate;
Operation refusal unit, for when there is described office and operating the eigenwert of shear plate, judges the operation that there is office shear plate in this process, and refuses the operation of described office shear plate.
8. device according to claim 7, is characterized in that, this device also comprises clearance unit, for:
The eigenwert that described office operates shear plate if do not exist, then let pass to this process.
9. device according to claim 7, is characterized in that, described detecting unit, for:
Adopt Hook Technique HOOK to detecting for the API obtaining shear plate content in system, and the process calling described API is tackled.
10. device according to claim 7, is characterized in that, described eigenwert detecting unit, for:
Adopt process stacks back trace technique, in this process transfer storehouse, detect the eigenwert that office operates shear plate.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510624553.9A CN105224862B (en) | 2015-09-25 | 2015-09-25 | A kind of hold-up interception method and device of office shear plates |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510624553.9A CN105224862B (en) | 2015-09-25 | 2015-09-25 | A kind of hold-up interception method and device of office shear plates |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN105224862A true CN105224862A (en) | 2016-01-06 |
| CN105224862B CN105224862B (en) | 2018-03-27 |
Family
ID=54993825
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201510624553.9A Active CN105224862B (en) | 2015-09-25 | 2015-09-25 | A kind of hold-up interception method and device of office shear plates |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN105224862B (en) |
Cited By (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106203077A (en) * | 2016-06-28 | 2016-12-07 | 北京金山安全软件有限公司 | Processing method and device for copy information and electronic equipment |
| CN108898016A (en) * | 2018-06-29 | 2018-11-27 | 北京奇虎科技有限公司 | Attack guarding method and device |
| CN109409098A (en) * | 2017-10-24 | 2019-03-01 | 浙江华途信息安全技术股份有限公司 | The method and apparatus for preventing shear plate leaking data |
| CN109766698A (en) * | 2018-06-26 | 2019-05-17 | 360企业安全技术(珠海)有限公司 | Data prevention method and device |
| CN109784037A (en) * | 2018-12-29 | 2019-05-21 | 360企业安全技术(珠海)有限公司 | The safety protecting method and device of document files, storage medium, computer equipment |
| CN109784036A (en) * | 2018-12-12 | 2019-05-21 | 平安科技（深圳）有限公司 | Anti- processing method of divulging a secret, device, medium and the electronic equipment of application program |
| CN109783316A (en) * | 2018-12-29 | 2019-05-21 | 360企业安全技术(珠海)有限公司 | The recognition methods and device, storage medium, computer equipment of system security log tampering |
| CN111782424A (en) * | 2020-07-03 | 2020-10-16 | 厦门美图之家科技有限公司 | Data processing method and device, electronic equipment and storage medium |
| CN112416622A (en) * | 2020-11-26 | 2021-02-26 | 江苏通付盾信息安全技术有限公司 | Clipboard data protection method and device, computer equipment and storage medium |
| CN113239350A (en) * | 2021-06-11 | 2021-08-10 | 杭州安恒信息技术股份有限公司 | Method and device for preventing shear plate from being illegally tampered and electronic device |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103605930A (en) * | 2013-11-27 | 2014-02-26 | 湖北民族学院 | Double file anti-divulging method and system based on HOOK and filtering driving |
| CN103995990A (en) * | 2014-05-14 | 2014-08-20 | 江苏敏捷科技股份有限公司 | Method for preventing electronic documents from divulging secrets |
| CN104268479A (en) * | 2014-09-29 | 2015-01-07 | 北京奇虎科技有限公司 | Text operation isolating method, device and mobile terminal |
-
2015
- 2015-09-25 CN CN201510624553.9A patent/CN105224862B/en active Active
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103605930A (en) * | 2013-11-27 | 2014-02-26 | 湖北民族学院 | Double file anti-divulging method and system based on HOOK and filtering driving |
| CN103995990A (en) * | 2014-05-14 | 2014-08-20 | 江苏敏捷科技股份有限公司 | Method for preventing electronic documents from divulging secrets |
| CN104268479A (en) * | 2014-09-29 | 2015-01-07 | 北京奇虎科技有限公司 | Text operation isolating method, device and mobile terminal |
Cited By (14)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106203077A (en) * | 2016-06-28 | 2016-12-07 | 北京金山安全软件有限公司 | Processing method and device for copy information and electronic equipment |
| CN106203077B (en) * | 2016-06-28 | 2019-06-07 | 珠海豹趣科技有限公司 | A kind of processing method of Copy Info, device and electronic equipment |
| CN109409098A (en) * | 2017-10-24 | 2019-03-01 | 浙江华途信息安全技术股份有限公司 | The method and apparatus for preventing shear plate leaking data |
| CN109766698A (en) * | 2018-06-26 | 2019-05-17 | 360企业安全技术(珠海)有限公司 | Data prevention method and device |
| CN108898016A (en) * | 2018-06-29 | 2018-11-27 | 北京奇虎科技有限公司 | Attack guarding method and device |
| CN109784036A (en) * | 2018-12-12 | 2019-05-21 | 平安科技（深圳）有限公司 | Anti- processing method of divulging a secret, device, medium and the electronic equipment of application program |
| CN109783316A (en) * | 2018-12-29 | 2019-05-21 | 360企业安全技术(珠海)有限公司 | The recognition methods and device, storage medium, computer equipment of system security log tampering |
| CN109784037A (en) * | 2018-12-29 | 2019-05-21 | 360企业安全技术(珠海)有限公司 | The safety protecting method and device of document files, storage medium, computer equipment |
| CN109784037B (en) * | 2018-12-29 | 2021-04-23 | 360企业安全技术(珠海)有限公司 | Security protection method and device for document file, storage medium and computer equipment |
| CN109783316B (en) * | 2018-12-29 | 2022-07-05 | 奇安信安全技术(珠海)有限公司 | Method and device for identifying tampering behavior of system security log, storage medium and computer equipment |
| CN111782424A (en) * | 2020-07-03 | 2020-10-16 | 厦门美图之家科技有限公司 | Data processing method and device, electronic equipment and storage medium |
| CN111782424B (en) * | 2020-07-03 | 2024-05-03 | 厦门美图之家科技有限公司 | Data processing method and device, electronic equipment and storage medium |
| CN112416622A (en) * | 2020-11-26 | 2021-02-26 | 江苏通付盾信息安全技术有限公司 | Clipboard data protection method and device, computer equipment and storage medium |
| CN113239350A (en) * | 2021-06-11 | 2021-08-10 | 杭州安恒信息技术股份有限公司 | Method and device for preventing shear plate from being illegally tampered and electronic device |
Also Published As
| Publication number | Publication date |
|---|---|
| CN105224862B (en) | 2018-03-27 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN105224862A (en) | A kind of hold-up interception method of office shear plate and device | |
| US20210209225A1 (en) | Methods and apparatus for control and detection of malicious content using a sandbox environment | |
| US9596257B2 (en) | Detection and prevention of installation of malicious mobile applications | |
| US20170171229A1 (en) | System and method for determining summary events of an attack | |
| US8413135B2 (en) | Methods, systems, and computer program products for controlling software application installations | |
| US8955121B2 (en) | System, method, and computer program product for dynamically adjusting a level of security applied to a system | |
| US20100037317A1 (en) | Mehtod and system for security monitoring of the interface between a browser and an external browser module | |
| US20060130144A1 (en) | Protecting computing systems from unauthorized programs | |
| US20160267272A1 (en) | Web malware blocking through parallel resource rendering | |
| KR20130129184A (en) | System and method for server-coupled malware prevention | |
| CN105631312B (en) | The processing method and system of rogue program | |
| CN103473501B (en) | A kind of Malware method for tracing based on cloud security | |
| CN107330328B (en) | Method and device for defending against virus attack and server | |
| CN107832613A (en) | A kind of computer virus processing method | |
| EP3518135B1 (en) | Protection against third party javascript vulnerabilities | |
| CN109684027B (en) | Method and device for dynamically tracking running of Java virtual machine | |
| CN103823873A (en) | Reading/writing method, device and system of browser setting item | |
| CN103514405B (en) | The detection method of a kind of buffer overflow and system | |
| CN102902908B (en) | Exempt from ActiveX plug-in security pick-up unit and method are installed | |
| US10880316B2 (en) | Method and system for determining initial execution of an attack | |
| CN106407815A (en) | Vulnerability detection method and device | |
| CN102902912B (en) | Exempt from ActiveX plug-in security pick-up unit and method are installed | |
| CN109960928B (en) | Method and system for processing suspicious file | |
| Korban et al. | APT3 adversary emulation plan | |
| Daghmehchi Firoozjaei et al. | Parent process termination: an adversarial technique for persistent malware |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |