CN107423119A - A kind of running software system and its operation method - Google Patents
A kind of running software system and its operation method Download PDFInfo
- Publication number
- CN107423119A CN107423119A CN201710205589.2A CN201710205589A CN107423119A CN 107423119 A CN107423119 A CN 107423119A CN 201710205589 A CN201710205589 A CN 201710205589A CN 107423119 A CN107423119 A CN 107423119A
- Authority
- CN
- China
- Prior art keywords
- software
- running
- target software
- target
- module
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Withdrawn
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/46—Multiprogramming arrangements
- G06F9/48—Program initiating; Program switching, e.g. by interrupt
- G06F9/4806—Task transfer initiation or dispatching
- G06F9/4843—Task transfer initiation or dispatching by program, e.g. task dispatcher, supervisor, operating system
- G06F9/485—Task life-cycle, e.g. stopping, restarting, resuming execution
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/30—Monitoring
- G06F11/3003—Monitoring arrangements specially adapted to the computing system or computing system component being monitored
- G06F11/302—Monitoring arrangements specially adapted to the computing system or computing system component being monitored where the computing system component is a software system
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
- G06F21/52—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow
- G06F21/53—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow by executing in a restricted environment, e.g. sandbox or secure virtual machine
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Software Systems (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Computer Security & Cryptography (AREA)
- Computing Systems (AREA)
- Computer Hardware Design (AREA)
- Mathematical Physics (AREA)
- Quality & Reliability (AREA)
- Stored Programmes (AREA)
Abstract
The invention discloses a kind of running software system and its operation method, the runtime includes starting module, monitoring modular, recovery module, starting module is used to start in certain running environment and operational objective software, divide certain memory headroom, by operating system provide realizing the API Calls of running software in the memory headroom of division；Monitoring modular is used to be monitored the process of the target software, and preserves service data and the operation note of the target software of monitoring gained；Recovery module is used for service data and operation note according to preservation, and the target software is returned to the running status specified.The running software system and operation method of the present invention can protect harm of the viral wooden horse to operating system in running software, realize the record of running software, playback, control, avoid loss of the user in software use.
Description
Technical field
The present invention relates to running software technical field, more particularly to a kind of running software system and its operation method.
Background technology
Software runtime environment, say it is hardware supported required for running software in the narrow sense, broadly could also say that one
Various conditions required by running software, including software environment and hardware environment.Software crash be use software process in can not
One of the problem of avoiding, because the programming quality of software is unqualified, or the running environment of software is undesirable, is typically easy to
Software is caused to be collapsed during operation.In addition, wooden horse, viral also moment endanger the normal operation of software, can also
Operating system, privacy content to user, capsule information cause crushing blow, moreover it is possible to distort in system file and registration table etc.
Hold, to reach the purpose of monitoring users operation.
Due to when the harm of virus, wooden horse and software crash causes the software positive closing to restart again, software can only be returned to
The running status of last moment before closing, or even the running status before software is closed can not be returned at all.However, in reality
In in many cases, when user needs again to restart after software positive closing, appointing before software is closed can be returned to
The running status at meaning moment.Prior art can not also provide a kind of operation method to software, can not only avoid running software
In virus and wooden horse directly endangered to caused by operating system, moreover it is possible to when restarting again after software positive closing, return to soft
The running status of any time before part closing, inconvenience and loss are brought to user.
The content of the invention
In view of the shortcomings of the prior art, the invention provides a kind of running software system and its operation method, can protect
Harm of the viral wooden horse to operating system in running software, the record of running software, playback, control are realized, avoids use
Loss of the person in software use.
The present invention solves technical problem and uses following technological means：
The invention provides a kind of running software system, including：Starting module, monitoring modular, recovery module, the starting module
It is connected with monitoring modular, the recovery module is connected with monitoring modular；
Wherein, starting module, for starting simultaneously operational objective software in certain running environment, it is empty to divide certain internal memory
Between, by operating system provide realizing that the API of running software is invoked in the memory headroom of division；
Monitoring modular, for being monitored to the process of the target software, and preserve the operation of the target software of monitoring gained
Data and operation note；
Recovery module, for the service data according to preservation and operation note, the target software is returned to the operation specified
State.
Preferably, the runtime also includes：
Environments match module, called for the API by providing operating system and carry out full encapsulation division, configure the target
The specific running environment of software.
Preferably, the monitoring modular includes：
Process injection module, in the running of the target software, hook program to be injected to the process of target software,
The process of target software is monitored；
Memory module, service data, operation note for the target software to monitoring gained are backed up and preserved.
Preferably, the recovery module includes：
Module is run, during being run in the target software, according to the service data of preservation and operation note to institute
State target software and perform pause, rollback, F.F., stopping, preservation progress and sectional drawing processing；
Module is restarted, for when restarting the target software, according to the service data of preservation and operation note, to described
Running before target software is closed is reset.
Preferably, the memory headroom of target software division for the API of running software call the agency provided with
Forward environment, the specific running environment of as described target software.
Preferably, it is right when the starting module is additionally operable to run multiple target softwares in the specific running environment
The multiple target software carries out mutually isolated.
Present invention also offers a kind of software running method, suitable for above-mentioned running software system, comprises the following steps：
（1）Start simultaneously operational objective software in certain running environment, divide certain memory headroom, operating system is provided
Realizing that the API of running software is invoked in the memory headroom of division；
（2）The process of the target software is monitored, and preserves service data and the operation of the target software of monitoring gained
Record；
（3）According to the service data of preservation and operation note, the target software is returned to the running status specified.
Preferably, methods described also includes：
The API that operating system provides is called and carries out full encapsulation division, configures the specific running environment of the target software；Will
Hook program injects the process of target software, and the process of target software is monitored；Monitor the operation of the target software of gained
Data, operation note are backed up and preserved.
Preferably, methods described also includes：
During the target software is run, the target software is performed according to the service data of preservation and operation note
Pause, rollback, F.F., stopping, preservation progress and sectional drawing processing；When restarting the target software, according to the fortune of preservation
Row data and operation note, the running before being closed to the target software are reset.
Compared with prior art, the present invention has the advantages that：
（1）The running software system of the present invention includes starting module, monitoring modular, recovery module, environments match module, monitors mould
Block includes process injection module, memory module, and recovery module includes operation module and restarts module.Modules cooperation, passes through
Start simultaneously operational objective software in specific running environment, the operating virus of target software and wooden horse can be avoided to operation
System causes directly to endanger so that the use of target software is safer.
（2）The software running method of the present invention to target software process by being monitored, and it is soft to preserve monitoring objective
The service data of part and operation note, realize during target software use it is recordable, can play back, can control, and can
According to the service data of preservation and operation note, target software is returned to the running status of any time so that target software
Use it is more convenient, fast, avoid trojan horse invasion operating system after user is caused inevitably to lose.
Brief description of the drawings
Fig. 1 is a kind of structural representation of running software system of the embodiment of the present invention；
Fig. 2 is the structural representation of another running software system of the embodiment of the present invention.
Embodiment
The technical solution of the present invention is further elaborated with specific embodiment below in conjunction with the accompanying drawings.
Embodiment 1.
As shown in figure 1, a kind of running software system of the present embodiment, including：Starting module 10, monitoring modular 20, recovery module
30, the starting module 10 is connected with monitoring modular 20, and the recovery module 30 is connected with monitoring modular 20.
Wherein, starting module 10, for starting in certain running environment and operational objective software, divide certain interior
Deposit space, by operating system provide realizing that the API of running software is invoked in the memory headroom of division.
Monitoring modular 20, for being monitored to the process of the target software, and preserve the target software of monitoring gained
Service data and operation note.
Recovery module 30, for the service data according to preservation and operation note, the target software is returned to specified
Running status.
Embodiment 2.
As shown in Fig. 2 a kind of running software system of the present embodiment, including：Starting module 10, monitoring modular 20, recovery module
30th, environments match module 40, the starting module 10 are connected with monitoring modular 20, and the recovery module 30 connects with monitoring modular 20
Connect, the environments match module 40 is connected with starting module 10.
Wherein, starting module 10, for starting in certain running environment and operational objective software, divide certain interior
Deposit space, by operating system provide realizing that the API of running software is invoked in the memory headroom of division.Target software
The memory headroom of division calls the agency provided and forwarding environment by the API of running software, as described target software
Specific running environment.When starting module 10 is additionally operable to run multiple target softwares in the specific running environment, to institute
It is mutually isolated to state multiple target softwares progress.
Monitoring modular 20, for being monitored to the process of the target software, and preserve the target software of monitoring gained
Service data and operation note.
Monitoring modular 20 includes：Process injection module 210, in the running of the target software, by hook
Program injects the process of target software, and the process of target software is monitored；Memory module 220, for monitoring gained
The service data of target software, operation note are backed up and preserved.
Recovery module 30, for the service data according to preservation and operation note, the target software is returned to specified
Running status.
Recovery module 30 includes：Module 310 is run, during being run in the target software, according to preservation
Service data and operation note perform pause, rollback, F.F., stopping, preservation progress and sectional drawing processing to the target software；Weight
Module 320 is opened, for when restarting the target software, according to the service data of preservation and operation note, to the mesh
Running before mark software is closed is reset.
Environments match module 40, called for the API by providing operating system and carry out full encapsulation division, configure institute
State the specific running environment of target software.
The operation method of the running software system of the present embodiment, comprises the following steps：
（1）Start simultaneously operational objective software in certain running environment, divide certain memory headroom, operating system is provided
Realizing that the API of running software is invoked in the memory headroom of division；
（2）The process of the target software is monitored, and preserves service data and the operation of the target software of monitoring gained
Record；
（3）According to the service data of preservation and operation note, the target software is returned to the running status specified.
Methods described also includes：
The API that operating system provides is called and carries out full encapsulation division, configures the specific running environment of the target software；Will
Hook program injects the process of target software, and the process of target software is monitored；Monitor the operation of the target software of gained
Data, operation note are backed up and preserved.
During the target software is run, according to the service data of preservation and operation note to the target software
Perform pause, rollback, F.F., stopping, preservation progress and sectional drawing processing；When restarting the target software, according to preservation
Service data and operation note, to the target software close before running reset.
The running software system modules of the present invention are cooperated with each other, by starting and running in specific running environment
Target software, the operating virus of target software and wooden horse can be avoided to cause directly to endanger to operating system so that target is soft
The use of part is safer.Software running method preserves monitoring objective software by being monitored to target software process
Service data and operation note, realize during target software use it is recordable, can play back, can control, and being capable of root
Service data and operation note according to preservation, target software is returned to the running status of any time so that target software
Using more convenient, fast, user is caused inevitably to lose after avoiding trojan horse invasion operating system.
Described above is only the preferred embodiment of the present invention, and protection scope of the present invention is not limited merely to above-mentioned implementation
Example, all technical schemes belonged under thinking of the present invention belong to protection scope of the present invention.It should be pointed out that for the art
Those of ordinary skill for, some improvements and modifications without departing from the principles of the present invention, these improvements and modifications
It should be regarded as protection scope of the present invention.
Claims (9)
- A kind of 1. running software system, it is characterised in that including：Starting module, monitoring modular, recovery module, the startup mould Block is connected with monitoring modular, and the recovery module is connected with monitoring modular；Wherein, starting module, for starting simultaneously operational objective software in certain running environment, it is empty to divide certain internal memory Between, by operating system provide realizing that the API of running software is invoked in the memory headroom of division；Monitoring modular, for being monitored to the process of the target software, and preserve the operation of the target software of monitoring gained Data and operation note；Recovery module, for the service data according to preservation and operation note, the target software is returned to the operation specified State.
- 2. running software system according to claim 1, it is characterised in that the runtime also includes：Environments match module, called for the API by providing operating system and carry out full encapsulation division, configure the target The specific running environment of software.
- 3. running software system according to claim 1, it is characterised in that the monitoring modular includes：Process injection module, in the running of the target software, hook program to be injected to the process of target software, The process of target software is monitored；Memory module, service data, operation note for the target software to monitoring gained are backed up and preserved.
- 4. running software system according to claim 1, it is characterised in that the recovery module includes：Module is run, during being run in the target software, according to the service data of preservation and operation note to institute State target software and perform pause, rollback, F.F., stopping, preservation progress and sectional drawing processing；Module is restarted, for when restarting the target software, according to the service data of preservation and operation note, to described Running before target software is closed is reset.
- 5. running software system according to claim 1, it is characterised in that the memory headroom of target software division is The API of running software calls provided agency and forwarding environment, the specific running environment of as described target software.
- 6. running software system according to claim 1, it is characterised in that the starting module is additionally operable to described specific Running environment in when running multiple target softwares, the multiple target software is carried out mutually isolated.
- 7. a kind of software running method, suitable for the running software system described in claim 1-6 any one, its feature exists In comprising the following steps：（1）Start simultaneously operational objective software in certain running environment, divide certain memory headroom, operating system is provided Realizing that the API of running software is invoked in the memory headroom of division；（2）The process of the target software is monitored, and preserves service data and the operation of the target software of monitoring gained Record；（3）According to the service data of preservation and operation note, the target software is returned to the running status specified.
- 8. software running method according to claim 7, it is characterised in that methods described also includes：The API that operating system provides is called and carries out full encapsulation division, configures the specific running environment of the target software；Will Hook program injects the process of target software, and the process of target software is monitored；Monitor the operation of the target software of gained Data, operation note are backed up and preserved.
- 9. the software running method according to claim 7 or 8, it is characterised in that methods described also includes：During the target software is run, the target software is performed according to the service data of preservation and operation note Pause, rollback, F.F., stopping, preservation progress and sectional drawing processing；When restarting the target software, according to the fortune of preservation Row data and operation note, the running before being closed to the target software are reset.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201710205589.2A CN107423119A (en) | 2017-03-31 | 2017-03-31 | A kind of running software system and its operation method |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201710205589.2A CN107423119A (en) | 2017-03-31 | 2017-03-31 | A kind of running software system and its operation method |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN107423119A true CN107423119A (en) | 2017-12-01 |
Family
ID=60423446
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201710205589.2A Withdrawn CN107423119A (en) | 2017-03-31 | 2017-03-31 | A kind of running software system and its operation method |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN107423119A (en) |
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN111898116A (en) * | 2019-12-26 | 2020-11-06 | 长扬科技（北京）有限公司 | Cache-based industrial white list learning method and system |
| CN112799914A (en) * | 2021-01-28 | 2021-05-14 | 南湖实验室 | Method and system for dynamically supervising codes and data in computer operation in full time |
| CN113761527A (en) * | 2020-07-01 | 2021-12-07 | 北京沃东天骏信息技术有限公司 | Rebound shell process detection method, device, equipment and storage medium |
Citations (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101587456A (en) * | 2009-07-08 | 2009-11-25 | 腾讯科技（深圳）有限公司 | Protection processing method and apparatus of software operation |
-
2017
- 2017-03-31 CN CN201710205589.2A patent/CN107423119A/en not_active Withdrawn
Patent Citations (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101587456A (en) * | 2009-07-08 | 2009-11-25 | 腾讯科技（深圳）有限公司 | Protection processing method and apparatus of software operation |
Cited By (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN111898116A (en) * | 2019-12-26 | 2020-11-06 | 长扬科技（北京）有限公司 | Cache-based industrial white list learning method and system |
| CN113761527A (en) * | 2020-07-01 | 2021-12-07 | 北京沃东天骏信息技术有限公司 | Rebound shell process detection method, device, equipment and storage medium |
| CN112799914A (en) * | 2021-01-28 | 2021-05-14 | 南湖实验室 | Method and system for dynamically supervising codes and data in computer operation in full time |
| CN112799914B (en) * | 2021-01-28 | 2022-08-05 | 南湖实验室 | Method and system for dynamically supervising codes and data in computer operation in full time |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN101587456B (en) | Protection processing method and apparatus of software operation | |
| CN104361076B (en) | The abnormality eliminating method and device of browser | |
| CN105279021B (en) | The method and apparatus for executing not maskable interrupts | |
| CN107423119A (en) | A kind of running software system and its operation method | |
| CN102722680B (en) | Method and system for removing rogue programs | |
| CN104115155B (en) | Abnormality processing in the data handling equipment with security domain and time security domain | |
| JP2014516191A (en) | System and method for monitoring virtual partitions | |
| CN105763602A (en) | Data request processing method, server and cloud interactive system | |
| WO2020224238A1 (en) | Blockchain node depolyment method, device and equipment, and storage medium | |
| CN104166575B (en) | The decision method and device of startup item handling result | |
| CN103581008A (en) | Router and software upgrading method thereof | |
| CN109800577B (en) | Method and device for identifying escape safety monitoring behavior | |
| CN104750492B (en) | The start-up control method and device of mobile device based on embedded OS | |
| CN102446119A (en) | Virtual machine dynamical migration method based on Passthrough I/O device | |
| CN107368384A (en) | A kind of Linux server abnormal information dump system and method | |
| CN105635035A (en) | Method for monitoring flow of virtual machine | |
| CN108228077A (en) | The management method of memory block, operation method, device, equipment, readable medium | |
| CN107783854B (en) | Method and device for processing progress | |
| CN102663283A (en) | Method for dynamically isolating computer system | |
| WO2018209513A1 (en) | Hard drive operation method and hard drive manager | |
| CN107908957A (en) | A kind of safe operation management method and system of intelligent terminal | |
| CN109271181A (en) | Using compatible restorative procedure, terminal device and computer readable storage medium | |
| KR20160138523A (en) | Method and apparatus for determining behavior information corresponding to a dangerous file | |
| CN103890713B (en) | Device and method for managing the register information in processing system | |
| US20170185445A1 (en) | High availability service virtual machine in virtualization environment |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| WW01 | Invention patent application withdrawn after publication |
Application publication date: 20171201 |
|
| WW01 | Invention patent application withdrawn after publication |