CN111437609B - Plug-in detection method and device - Google Patents

Plug-in detection method and device Download PDF

Info

Publication number
CN111437609B
CN111437609B CN202010230451.XA CN202010230451A CN111437609B CN 111437609 B CN111437609 B CN 111437609B CN 202010230451 A CN202010230451 A CN 202010230451A CN 111437609 B CN111437609 B CN 111437609B
Authority
CN
China
Prior art keywords
type
coordinate
focus
class
game
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN202010230451.XA
Other languages
Chinese (zh)
Other versions
CN111437609A (en
Inventor
许云清
殷赵辉
彭青白
何小龙
曹飞
胡和君
潘泓
岑韵弦
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Tencent Technology Shenzhen Co Ltd
Original Assignee
Tencent Technology Shenzhen Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Tencent Technology Shenzhen Co Ltd filed Critical Tencent Technology Shenzhen Co Ltd
Priority to CN202010230451.XA priority Critical patent/CN111437609B/en
Publication of CN111437609A publication Critical patent/CN111437609A/en
Application granted granted Critical
Publication of CN111437609B publication Critical patent/CN111437609B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • A—HUMAN NECESSITIES
    • A63—SPORTS; GAMES; AMUSEMENTS
    • A63F—CARD, BOARD, OR ROULETTE GAMES; INDOOR GAMES USING SMALL MOVING PLAYING BODIES; VIDEO GAMES; GAMES NOT OTHERWISE PROVIDED FOR
    • A63F13/00—Video games, i.e. games using an electronically generated display having two or more dimensions
    • A63F13/70—Game security or game management aspects
    • A63F13/75—Enforcing rules, e.g. detecting foul play or generating lists of cheating players
    • A—HUMAN NECESSITIES
    • A63—SPORTS; GAMES; AMUSEMENTS
    • A63F—CARD, BOARD, OR ROULETTE GAMES; INDOOR GAMES USING SMALL MOVING PLAYING BODIES; VIDEO GAMES; GAMES NOT OTHERWISE PROVIDED FOR
    • A63F2300/00—Features of games using an electronically generated display having two or more dimensions, e.g. on a television screen, showing representations related to the game
    • A63F2300/50—Features of games using an electronically generated display having two or more dimensions, e.g. on a television screen, showing representations related to the game characterized by details of game servers
    • A63F2300/55—Details of game data or player data management
    • A63F2300/5586—Details of game data or player data management for enforcing rights or rules, e.g. to prevent foul play

Landscapes

  • Engineering & Computer Science (AREA)
  • Multimedia (AREA)
  • Business, Economics & Management (AREA)
  • Computer Security & Cryptography (AREA)
  • General Business, Economics & Management (AREA)
  • User Interface Of Digital Computer (AREA)

Abstract

The application discloses a plug-in detection method and device, which are used for detecting whether a plug-in exists in a game client side, and obtaining focus coordinate data generated on a game picture when an external input body moves to obtain a first type of coordinate set; and acquiring the focus coordinate data in each frame of game image read by the game client to obtain a second type of coordinate set. When it is detected that the game client hits an enemy character, whether the focus coordinate in the game interface has a sudden change is judged by comparing the focus coordinate data in the first type of coordinate set and the second type of coordinate set, and if the focus coordinate has a sudden change, it is determined that a plug-in exists on the game client. According to the scheme, the characteristic information of the focus self-aiming plug-in sample is not required to be learned in advance, so that the focus self-aiming plug-in sample data is not required to be collected, the time required in the learning and training process is saved, and the detection efficiency is improved.

Description

Plug-in detection method and device
Technical Field
The application relates to the technical field of game safety, in particular to a plug-in detection method and device.
Background
A plug-in is a cheating program that consummates a benefit to a player by modifying the code or data of a game client. A plug-in capable of automatically aiming is designed for a shooting game third party developer, and the plug-in controls a game role to aim at an enemy role by modifying the focal coordinates of a game client to realize accurate shooting.
The conventional plug-in detection method generally acquires characteristic information, such as progress, file, window and the like, on a game client, then queries whether a plug-in containing the characteristic information exists in a database, and if so, determines that the plug-in exists on the game client. The plug-in detection mode only aims at plug-ins with known characteristic information and cannot identify newly appeared plug-ins.
Disclosure of Invention
In view of the above, the present application provides a plug-in detection method and device, so as to solve the problem that the conventional plug-in detection method can only detect plug-ins with known characteristics, thereby improving the accuracy and flexibility of plug-in detection, and the disclosed technical scheme is as follows:
in one aspect, the application provides a plug-in detection method, including:
acquiring focus coordinate data generated on a game picture when an external input body moves to obtain a first type coordinate set;
acquiring focus coordinate data read by a game client from each frame of game image to obtain a second type of coordinate set;
when it is detected that the game client side hits an enemy character, determining whether a focus coordinate has a sudden change or not according to focus coordinate data in the first type of coordinate set and the second type of coordinate set;
and if the focus coordinate has a sudden change, determining that the game client has a plug-in.
In a possible implementation manner, the determining whether there is a sudden change in focus according to the focus coordinate data in the first type coordinate set and the second type coordinate set after detecting that the game client successfully hits an enemy character includes:
determining whether a first-class abnormity exists according to a first-class focus coordinate in the first-class coordinate set, wherein the first-class abnormity is that the focus has mutation under the condition that an external input body does not have mutation;
determining whether a second type of abnormity exists according to a second type of focus coordinate in the second type of coordinate set, wherein the second type of abnormity is that the focus in two adjacent game images has sudden change;
determining whether a third type of abnormality exists according to the focus coordinate data in the same time period in the first type of coordinate set and the second type of coordinate set, wherein the third type of abnormality is a sudden change between a focus generated by an external input body and a focus read by a game client;
and when the first type of abnormality, the second type of abnormality and the third type of abnormality exist at the same time, determining that the focus has a mutation.
In one possible implementation, determining whether there is a first type anomaly according to a first type focus coordinate in the first type coordinate set includes:
calculating a first class coordinate difference between first class focus coordinates acquired at any two adjacent moments in the first class coordinate set, and determining that a first class abnormality exists if the first class coordinate difference is greater than a first distance threshold;
determining whether a second type of abnormality exists according to a second type of focus coordinate in the second type of coordinate set, including:
calculating a second type coordinate difference between second type focus coordinates corresponding to two adjacent game images, and if the second type coordinate difference is greater than a second distance threshold, determining that a second type anomaly exists;
determining whether a third type of abnormality exists according to the focus coordinate data in the first type of coordinate set and the second type of coordinate set, including:
and calculating a third type coordinate difference between the first type focus coordinate and the second type focus coordinate obtained in the same time period, and determining that a third type anomaly exists if the third type coordinate difference is greater than a third distance threshold.
In a possible implementation manner, the first type of focus coordinates and the second type of focus coordinates are stored in the same queue from early to late according to the acquisition time;
determining whether a first type of anomaly exists according to a first type of focus coordinate in the first type of coordinate set, comprising:
calculating a coordinate difference between two adjacent first-class focus coordinates stored in the queue to obtain a first-class coordinate difference, and determining that a first-class abnormality exists if the first-class coordinate difference is greater than a first distance threshold;
determining whether a second type of abnormality exists according to a second type of focus coordinate in the second type of coordinate set, including:
calculating a coordinate difference between two adjacent second focus coordinates in the queue to obtain a second type of coordinate difference, and if the second type of coordinate difference is greater than a second distance threshold, determining that a second type of abnormality exists;
determining whether a third type of abnormality exists according to the focus coordinate data in the first type of coordinate set and the second type of coordinate set, including:
and calculating a coordinate difference between the adjacent first-class focus coordinates and the second-class focus coordinates in the queue to obtain a third-class coordinate difference, and if the third-class coordinate difference is larger than a third distance threshold, determining that a third-class abnormity exists.
In one possible implementation manner, acquiring focus coordinate data generated on a game screen when an external input body moves to obtain a first type coordinate set includes:
when the movement of an external input body is detected, acquiring screen focus coordinates obtained by an operating system and corresponding to the external input body after the movement;
and converting the screen focus coordinate into coordinate data in a game interface to obtain a first type of focus coordinate, and storing the first type of focus coordinate.
In a possible implementation manner, the obtaining of the focus coordinate data read by the game client from each frame of game image to obtain a second type coordinate set includes:
acquiring screen focus coordinates read by the game client from each frame of game image;
and converting the screen focus coordinate into coordinate data in a game interface to obtain a second type of focus coordinate, and storing the second type of focus coordinate.
In one possible implementation, the process of determining that there is a store-in on the game client includes:
counting the times of the sudden change of the focus of the game client in a specified time period;
and if the times reach a preset numerical value, determining that the game client has a plug-in.
In one possible implementation manner, the game client is installed on a PC, the external input body is a mouse, and the focus is a cursor of the mouse;
alternatively, the first and second electrodes may be,
the game client is installed on a mobile intelligent terminal with a touch screen, the external input body is a touch body, and the focus is a touch point on a display picture of the mobile intelligent terminal.
On the other hand, this application still provides a plug-in detection device, includes:
the first-class coordinate acquisition module is used for acquiring focus coordinate data generated on a game picture when the external input body moves to obtain a first-class coordinate set;
the second-class coordinate acquisition module is used for acquiring the focus coordinate data read by the game client from each frame of game image to obtain a second-class coordinate set;
the detection module is used for determining whether the focus coordinate has a sudden change or not according to the focus coordinate data in the first type coordinate set and the second type coordinate set after detecting that the game client side hits an enemy character;
and the determining module is used for determining that the game client has a plug-in when the focus coordinate has sudden change.
In another aspect, the present application further provides a store-in detection system, including: the system comprises a plug-in detection client and a plug-in detection server;
the plug-in detection client is used for acquiring focus coordinate data generated on a game picture when the external input body moves to obtain a first type of coordinate set, and acquiring focus coordinate data read by the game client from each frame of game image to obtain a second type of coordinate set; after detecting that the game client side hits an enemy role, sending the first type of coordinate set and the second type of coordinate set to the plug-in detection server;
the plug-in server is used for determining whether the focus coordinate has mutation according to the focus coordinate data in the first type coordinate set and the second type coordinate set; and if the focus coordinate has a sudden change, determining that the game client has a plug-in.
In another aspect, the present application further provides a plug-in detection client, including a processor and a memory;
wherein the processor is configured to execute a program stored in the memory;
the memory is to store a program to at least:
acquiring focus coordinate data generated on a game picture when an external input body moves to obtain a first type coordinate set;
acquiring focus coordinate data read by a game client from each frame of game image to obtain a second type of coordinate set;
when it is detected that the game client side hits an enemy character, determining whether a focus coordinate has a sudden change or not according to focus coordinate data in the first type of coordinate set and the second type of coordinate set;
and if the focus coordinate has a sudden change, determining that the game client has a plug-in.
On the other hand, the present application further provides a storage medium, where computer-executable instructions are stored, and when the computer-executable instructions are loaded and executed by a processor, the method for detecting a plug-in is implemented as any one of the methods provided in the first aspect.
The plug-in detection method is used for detecting whether a plug-in exists in a game client side, and obtaining focus coordinate data generated on a game picture when an external input body moves to obtain a first type of coordinate set; and acquiring the focus coordinate data in each frame of game image read by the game client to obtain a second type of coordinate set. When it is detected that the game client hits an enemy character, whether the focus coordinate in the game interface has a sudden change is judged by comparing the focus coordinate data in the first type of coordinate set and the second type of coordinate set, and if the focus coordinate has a sudden change, it is determined that a plug-in exists on the game client. According to the scheme, the characteristic information of the focus self-aiming plug-in sample is not required to be learned in advance, so that the focus self-aiming plug-in sample data is not required to be collected, the time required in the learning and training process is saved, and the detection efficiency is improved.
Drawings
In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings needed to be used in the description of the embodiments are briefly introduced below, and it is obvious that the drawings in the following description are only embodiments of the present application, and it is obvious for those skilled in the art to obtain other drawings based on the provided drawings without creative efforts.
Fig. 1 is a schematic structural diagram illustrating a cheating detection system according to an embodiment of the present application;
FIG. 2 is a flowchart illustrating a method for detecting a store-in according to an embodiment of the present disclosure;
FIG. 3 is a flow chart illustrating another plug-in detection method according to an embodiment of the present application;
FIG. 4 is a diagram illustrating cursor coordinate data stored in a circular queue according to an embodiment of the present disclosure;
fig. 5 is a schematic structural diagram illustrating an external hanging detection apparatus according to an embodiment of the present application;
fig. 6 shows a schematic structural diagram of a server provided in an embodiment of the present application.
Detailed Description
Before introducing the external hanging detection method of the present application, the terms appearing herein will be explained first:
the focus refers to a symbol or a graphic displayed on a human-computer interaction interface of a terminal (e.g., a personal computer, a smart phone, a tablet computer, etc.) so as to respond to a movement of an external input body (e.g., a mouse, a touch pad, a digital pen, a human finger, etc.).
The player focus coordinate is a focus at which a player controls aiming of a weapon used by his or her own game character by operating an external input body in a shooting game.
The focus self-aiming plug-in is a plug-in which a third-party developer designs aiming at a shooting game and can realize automatic aiming, and the realization principle is that a game role of a current player is controlled to automatically aim at an enemy role by modifying the focus coordinate of the player so as to realize accurate shooting.
The detection of the focus self-aiming plug-in is one of the difficulties of shooting games, because different game engines obtain different player focus coordinates, the modes of realizing automatic aiming of the focus self-aiming plug-in are different, and at present, no detection scheme aiming at the focus self-aiming plug-in exists. If other types of plug-in detection methods are adopted, sample data of each type of focus self-aiming plug-in needs to be collected in advance, the sample is learned to obtain sample characteristic information, and finally the type of focus self-aiming plug-in can be detected according to the learned characteristic information. This approach requires collecting a large amount of plug-in sample data, and learning the plug-in characteristics in advance takes a long time and is inefficient.
In order to solve the technical problem, the application provides a plug-in detection method, which judges whether a focus has a sudden change or not according to a focus coordinate generated by an external input body and a focus coordinate read by a game client on each frame of game image, and determines that a focus self-aiming plug-in exists if the focus has the sudden change. According to the scheme, the characteristic information of the focus self-aiming plug-in sample is not required to be learned in advance, so that the focus self-aiming plug-in sample data is not required to be collected, the time required in the learning and training process is saved, and the detection efficiency is improved.
In order to facilitate understanding of the plug-in detection method of the present application, a plug-in detection system of the present application is described below.
As shown in fig. 1, a schematic structural diagram of a plug-in detection system provided in the embodiment of the present application mainly includes a plug-in detection client 100 and a plug-in detection server 200.
Wherein, the plug-in detection client 100 can be integrated in the game client. Furthermore, the game client may be a game client installed on a Personal Computer (PC), or an Application (APP) installed on a mobile smart terminal (e.g., a smart phone, a tablet computer, etc.), and fig. 1 only shows an Application scenario of the game client on the PC.
The plug-in detection client 100 is used for collecting the focus coordinate data of the game client and reporting the focus coordinate data to the plug-in detection server 200.
The plug-in detection server 200 is configured to detect whether there is a sudden change abnormality in the focus coordinate data reported by the plug-in detection client 100, so as to determine whether the game client has a focus of self-aiming plug-in.
In other embodiments of the present application, the functional modules for implementing plug-in detection in the plug-in detection server 200 may also be integrated in the game client 300, that is, the game client deploys modules with data acquisition and detection functions at the same time.
The plug-in detection method provided by the present application will be described below with reference to fig. 2, and as shown in fig. 2, the plug-in detection method provided by the embodiment of the present application mainly includes the following steps:
s110, acquiring focus coordinate data generated on a game picture when the external input body moves to obtain a first-class coordinate set.
For a game client installed on a PC, an external input body is a mouse, a focus is a cursor of the mouse on a screen, and cursor coordinates generated on a game picture after the mouse moves are obtained in the application scene, wherein the cursor coordinates are a first type coordinate set.
For a game client installed on a mobile intelligent terminal (such as a smart phone, a tablet computer and the like), an external input body is a touch body such as a finger, and a focus is a touch point of the touch body on a touch screen of the mobile intelligent terminal. In the application scene, the coordinates of the touch point of the touch body on the screen, namely the first type coordinate set, are obtained.
In summary, the first type coordinate set refers to a focus coordinate generated by the external input object on the terminal screen, which is obtained by the terminal operating system when the external input object moves.
And S120, acquiring the focus coordinate data read by the game client from each frame of game image to obtain a second type coordinate set.
The second type of coordinate set is the focus coordinate read by the game client from each frame of game image, the plug-in detection client can be embedded into the game client by Hook technology (a technology capable of changing the program execution flow), and when the game client reads the focus coordinate in the game image, the plug-in detection client will copy the focus coordinate read by the game client.
The second type of coordinate set is the focus coordinate obtained by the game client.
S130, when it is detected that the game client side hits an enemy character, whether the focus coordinate has a sudden change or not is determined according to the focus coordinate data in the first type coordinate set and the second type coordinate set. If so, S140 is performed. If not, the process is ended, and the next detection process is continued.
And when the plug-in detection client detects that the current role hits the enemy role, reporting the first type coordinate set and the second type coordinate set to a plug-in detection server, and judging whether the focus coordinate has mutation or not by the plug-in detection server according to the focus coordinate data sent by the plug-in detection client.
When the player operates the external input body, the focus movement acquired by the operating system is a continuous process, that is, the focus coordinates of the game character gradually move from the current coordinate point to the coordinate point of the enemy character (target coordinate point), and there are many other focus coordinates between the current coordinate point and the target coordinate point. And when the focus is used for self-aiming and externally hanging operation of the game role, the focus coordinate is directly modified, namely the focus coordinate of the game role of the current player is directly changed from the current coordinate point to the coordinate point of the enemy role, and other focus coordinates cannot be generated between the current coordinate point and the target coordinate point, namely the focus coordinate is suddenly changed.
In one possible implementation manner, whether the focus coordinate has a sudden change is determined by whether the coordinate difference of the focus coordinates acquired at two adjacent acquisition moments exceeds a preset distance threshold.
S140, determining that the game client has a plug-in.
Since the focus movement is usually a continuous process when the player operates the external input body, and the focus movement is an abrupt change process when the focus self-aiming plug-in operates, when an abrupt change of the focus coordinate is detected, the focus self-aiming plug-in on the game client is determined.
Moreover, the focus self-aiming plug-in can accurately aim at the enemy character and hit, so that whether the focus coordinate is abnormal or not is detected when the game client side is detected to hit the enemy character, and the detection efficiency is improved.
In one embodiment of the present application, whether there is a sudden change in the focal coordinates may be determined by the following process:
and judging whether a first-class abnormality exists according to the focus coordinate data in the first-class coordinate set, wherein the first-class abnormality refers to that the focus has a sudden change under the condition that the external input body has no sudden change.
In an embodiment of the present application, a coordinate difference between first-class focus coordinates acquired at two adjacent moments in the first-class coordinate set, that is, a first-class coordinate difference may be calculated, and if the first-class coordinate difference is greater than a first distance threshold, it is determined that a first-class abnormality exists.
And judging whether a second type of abnormity exists according to the focus coordinate data in the second type of coordinate set, wherein the second type of abnormity refers to that the focus in two adjacent game images has sudden change.
In an embodiment of the present application, a coordinate difference between two adjacent frames of the second type of focus coordinate, that is, a second type of coordinate difference, is calculated, and if the second type of coordinate difference is greater than a second distance threshold, it is determined that the second type of abnormality exists.
And judging whether a third type of abnormity exists according to the focus coordinates in the same time period in the first type of coordinate set and the second type of coordinate set, wherein the third type of abnormity refers to that the focus generated by the external input body and the focus read by the game client end have sudden change.
In an embodiment of the present application, a coordinate difference between the first-type focus coordinate and the second-type focus coordinate obtained in the same time period, that is, a third-type coordinate difference is calculated, and if the third-type coordinate difference is greater than a third distance threshold, it is determined that a third-type anomaly exists.
When the three types of exceptions exist simultaneously, determining that a plug-in exists on the game client, wherein the plug-in is specifically a focus self-aiming plug-in.
It should be noted that the first distance threshold, the second distance threshold, and the third distance threshold may all be freely set according to actual requirements, for example, the three distance thresholds are all set to be 50 pixels.
In one possible implementation, S110 and S120 are performed by the store detection client in fig. 1, and S130 and S140 are performed by the store detection server.
In another possible implementation manner, S110 to S140 are all executed by the plug-in detection client.
The plug-in detection method provided by the embodiment is used for detecting whether a focus self-aiming plug-in exists in a game client, and acquiring focus coordinate data generated on a game picture when an external input body moves to obtain a first type of coordinate set; and acquiring the focus coordinate data in each frame of game image read by the game client to obtain a second type of coordinate set. When it is detected that the game client hits an enemy character, whether the focus coordinate in the game interface has a sudden change is judged by comparing the focus coordinate data in the first type of coordinate set and the second type of coordinate set, and if the focus coordinate has a sudden change, it is determined that the focus on the game client is self-aiming and externally hung. According to the scheme, the characteristic information of the focus self-aiming plug-in sample is not required to be learned in advance, so that the focus self-aiming plug-in sample data is not required to be collected, the time required in the learning and training process is saved, and the detection efficiency is improved.
The process of detecting whether the game client installed on the PC has a focus of self-aiming plug-in will be described in detail below with reference to fig. 3. As shown in fig. 3, the plug-in detection method provided in this embodiment mainly includes:
s210, when the movement of the mouse is detected, the plug-in detection client acquires screen cursor coordinates acquired by the operating system, namely first-class screen coordinates.
In the Widows operating system, after a window is displayed, messages sent by the operating system can be received, and window process functions are functions for processing the messages.
When the Widows operating system detects the INPUT of the mouse and the keyboard, a WM _ INPUT message representing that the INPUT of the mouse is detected is generated and sent to the window process function for processing.
In this embodiment, the plug-in detection client registers a window process function with the game client, and calls the window process function when the window process function receives the WM _ INPUT message sent by the operating system
The Windows APIGETCursorPos function acquires current cursor coordinates, namely screen cursor coordinates.
The Windows API, i.e., the application program interface of the Windows operating system, is a function interface that the Windows operating system provides for the application program to call.
And S220, the plug-in detection client converts the acquired first-type screen coordinates into application program client area coordinates, namely first-type program cursor coordinates.
The origin of coordinates of the screen cursor coordinates obtained in S210 is the upper left corner with respect to the screen, and the origin of coordinates of the application client area is the upper left corner with respect to the game interface, and since the game client employs the application client area coordinates, it is necessary to convert the screen cursor coordinates into the application client area coordinates.
The conversion process can be performed according to a pre-configured coordinate conversion algorithm, and the coordinate conversion algorithm can be obtained according to a coordinate difference between the coordinate of the upper left corner of the screen and the coordinate of the upper left corner of the interface displayed by the game program.
And S230, storing the obtained first type program cursor coordinates into a queue by the plug-in detection client.
The game client reads the cursor coordinate in the image aiming at each frame of image in the game, if the cursor coordinate is stored completely, the memory space of the plug-in detection client is wasted, and in order to reduce the memory space occupied by the cursor coordinate data, the cursor coordinate data is stored by adopting a circular queue. The new coordinate data overwrites the oldest coordinate data stored in the queue if the circular queue is already full of data.
S240, the plug-in detection client acquires cursor coordinates, namely second-type screen coordinates, read by the game client from each frame of game image.
This step is cursor coordinates read by the game client, which is screen coordinate data, i.e., the origin of coordinates relative to the upper left corner of the screen.
And the plug-in detection client is embedded into the code of the game client by adopting Hook technology, and when the game client reads the cursor coordinate in the game image, the plug-in detection client acquires the cursor coordinate.
And S250, the plug-in detection client converts the obtained second type screen coordinates into cursor coordinates of the application program client area, namely second type program cursor coordinates.
The process of converting the second-type screen coordinates into the second-type program cursor coordinates is the same as the process of converting the coordinates in S220, and is not described herein again.
And S260, storing the second type program cursor coordinates into a queue by the plug-in detection client.
S270, when the game client side hits the enemy role, the plug-in detection client side sends the coordinate data in the queue to the plug-in detection server.
And the plug-in detection client modifies the normal code execution flow of the game client through the Hook technology, so that when the game client shoots and hits an enemy role, the plug-in detection client sends cursor coordinate data stored in the queue to the plug-in detection server.
S280, the plug-in detection server sequentially calculates the coordinate difference between two adjacent cursor coordinate data in the queue, and judges whether the cursor coordinate has mutation according to the coordinate difference.
In one embodiment of the present application, since the cursor coordinates in the queue are stored in order of the acquisition time from early to late, the cursor coordinate data stored in the circular queue is as shown in fig. 4, where a isiIndicating the coordinates of the cursor of the first type of program, B, acquired at different timesiAnd indicating the cursor coordinates of the second program corresponding to different game image frames.
Whether the cursor coordinate has sudden change is judged by calculating the coordinate difference between two adjacent cursor coordinate data, and the specific judgment process is as follows:
1) calculating the coordinate difference of two adjacent first-class program cursor coordinates in the queue, namely the first-class coordinate difference, taking the cursor coordinate data shown in fig. 4 as an example, calculating a coordinate difference in the queue a1And A2Seat ofAnd marking difference. And then, judging whether the first-class coordinate difference is larger than a first distance threshold value, and if so, determining that the first-class abnormity exists.
Two adjacent first-class program cursor coordinates in the queue are cursor coordinates generated by two mouse movements acquired in a short time, usually, the movement of the cursor coordinates is a continuous process when a player operates the mouse, and the cursor coordinates cannot generate sudden change in the short time. On the contrary, when the cursor coordinates of two adjacent first-class programs are detected to have sudden changes, the first-class abnormity is determined to exist.
It can be seen that the first type of abnormality refers to a large change in cursor coordinates when the mouse is not mutated.
2) Calculating the coordinate difference of two adjacent second-class program cursor coordinates in the queue, namely the second-class coordinate difference, taking fig. 4 as an example, the step calculates B in the queue1And B2The coordinate difference of (2). And then, judging whether the second type coordinate difference is larger than a second distance threshold value, and if so, determining that a second type abnormity exists.
Two adjacent second-class program cursor coordinates in the queue are cursor coordinates in two adjacent frames of game images, and the playing time interval of the two adjacent frames of game images in the game running process is very short, so that the cursor coordinates read in the two adjacent frames of game images can not be suddenly changed under normal conditions. On the contrary, when the cursor coordinates obtained from two adjacent frames of game images suddenly change, it is determined that the second type of abnormality exists.
The second type of abnormality is that there is a sudden change in the cursor coordinates in two adjacent game images.
3) Calculating the coordinate difference between two adjacent cursor coordinates of the first type program and the second type program in the queue, namely the coordinate difference of the third type, taking fig. 4 as an example, calculating a in the queue2And B1The coordinate difference of (2). And then, judging whether the third type coordinate difference is larger than a third distance threshold value, and if so, determining that the third type abnormity exists.
The difference between the acquisition time of two adjacent first-class program cursor coordinates and the acquisition time of second-class program cursor coordinates in the queue is small, and the difference between the cursor coordinates after the mouse moves under the normal condition and the cursor coordinates read from the game image in the time period is small, so that if the difference between the two adjacent first-class program cursor coordinates and the second-class program cursor coordinates in the queue is large, the cursor coordinates are determined to have the movement of unknown reasons after the mouse moves, namely, the third-class abnormality occurs.
And S290, traversing cursor coordinate data in the queue, and if the three types of abnormalities exist at the same time, preliminarily determining that the game client has a focus for self-aiming plug-in.
In other embodiments of the present application, the first type program cursor coordinates and the second type program cursor coordinates may be stored in two different queues, and in this case, the three types of coordinate differences may be calculated in the manner shown in S140 in the foregoing embodiment.
In practical application, if a certain game client has a cursor coordinate mutation phenomenon only once, the game client may have the cursor coordinate mutation caused by misoperation, and the focus self-aiming plug-in is not used. However, if the cursor coordinate suddenly changes when a certain game client continuously hits an enemy character for multiple times, the game client is determined to have a focus to aim at the plug-in.
Therefore, in another embodiment of the application, in order to obtain a more accurate detection result, the plug-in detection server counts the number of times of sudden change of cursor coordinates occurring in a period of time of the game client, and determines that the game client has a focus to self-aim the plug-in if the number of times of sudden change reaches a preset value.
When the plug-in detection server determines that a certain game client has a focus to self-aim for the plug-in, the plug-in detection server sends plug-in using related punishment information to the plug-in detection client so that the game client can display the related information on a game interface.
According to the plug-in detection method provided by the embodiment, whether the cursor coordinate has a sudden change or not is judged by comparing the cursor coordinate generated by the movement of the mouse with the cursor coordinate in the game image, and if the cursor coordinate has the sudden change, the fact that the focus on the game client aims for the plug-in automatically is preliminarily determined. According to the scheme, the characteristic information of the focus self-aiming plug-in sample does not need to be learned in advance, so that the focus self-aiming plug-in sample data does not need to be collected, meanwhile, the time required in the learning and training process is saved, and the detection efficiency is improved. In addition, the method counts the times of cursor coordinate mutation of the game client within a period of time, and determines that the focus on the game client is self-aimed and externally hung when the times of the cursor coordinate mutation reach a preset value, so that the accuracy of the detection result is further improved.
Corresponding to the embodiment of the plug-in detection method, the application also provides an embodiment of a plug-in detection device.
Referring to fig. 5, a schematic structural diagram of a plug-in detection device provided in an embodiment of the present application is shown, where the device of the present embodiment is implemented in a plug-in detection client, and the plug-in detection client is deployed in a game client.
In one application scenario, the game client is installed on a PC, the external input body is a mouse, and the focus is a cursor of the mouse.
In another application scenario, the game client is installed on a mobile intelligent terminal with a touch screen, the external input body is a touch body, and the focus is a touch point on a display screen of the mobile intelligent terminal.
As shown in fig. 5, the apparatus mainly includes a first-type coordinate acquiring module 510, a second-type coordinate acquiring module 520, a detecting module 530, and a determining module 540.
The first type coordinate obtaining module 510 is configured to obtain focus coordinate data generated on the game screen when the external input object moves, so as to obtain a first type coordinate set.
In a possible implementation manner, the first-type coordinate obtaining module 510 is specifically configured to:
when the movement of an external input body is detected, acquiring screen focus coordinates obtained by an operating system and corresponding to the external input body after the movement;
and converting the screen focus coordinate into coordinate data in a game interface to obtain a first type of focus coordinate, and storing the first type of focus coordinate.
And a second-type coordinate obtaining module 520, configured to obtain the focus coordinate data read by the game client from each frame of game image, so as to obtain a second-type coordinate set.
In another possible implementation manner, the second-type coordinate obtaining module 520 is specifically configured to:
acquiring screen focus coordinates read by the game client from each frame of game image;
and converting the screen focus coordinate into coordinate data in a game interface to obtain a second type of focus coordinate, and storing the second type of focus coordinate.
The detecting module 530 is configured to determine whether there is a sudden change in the focus coordinate according to the focus coordinate data in the first type of coordinate set and the second type of coordinate set after it is detected that the game client hits an enemy character.
In an embodiment of the present application, the detecting module 530 is specifically configured to:
and determining whether a first-class abnormity exists according to a first-class focus coordinate in the first-class coordinate set, wherein the first-class abnormity is that the focus has sudden change under the condition that the external input body has no sudden change.
Determining whether a second type of abnormity exists according to a second type of focus coordinate in the second type of coordinate set, wherein the second type of abnormity is that the focus in two adjacent game images has sudden change;
determining whether a third type of abnormality exists according to the focus coordinate data in the same time period in the first type of coordinate set and the second type of coordinate set, wherein the third type of abnormality is a sudden change between a focus generated by an external input body and a focus read by a game client;
and when the first type of abnormality, the second type of abnormality and the third type of abnormality exist at the same time, determining that the focus has a mutation.
In a possible implementation manner, a first-class coordinate difference between first-class focus coordinates acquired at any two adjacent moments in the first-class coordinate set is calculated, and if the first-class coordinate difference is greater than a first distance threshold, it is determined that a first-class abnormality exists;
calculating a second type coordinate difference between second type focus coordinates corresponding to two adjacent game images, and if the second type coordinate difference is greater than a second distance threshold, determining that a second type anomaly exists;
and calculating a coordinate difference between the adjacent first-class focus coordinates and the second-class focus coordinates in the queue to obtain a third-class coordinate difference, and if the third-class coordinate difference is larger than a third distance threshold, determining that a third-class abnormity exists.
In another possible implementation manner, the first type of focus coordinates and the second type of focus coordinates are stored in the same queue according to the sequence of the acquisition time from early to late, and in this application scenario, the process of determining whether three types of abnormalities exist is as follows:
calculating a coordinate difference between two adjacent first-class focus coordinates stored in the queue to obtain a first-class coordinate difference, and determining that a first-class abnormality exists if the first-class coordinate difference is greater than a first distance threshold;
calculating a coordinate difference between two adjacent second focus coordinates in the queue to obtain a second type of coordinate difference, and if the second type of coordinate difference is greater than a second distance threshold, determining that a second type of abnormality exists;
and calculating a coordinate difference between the adjacent first-class focus coordinates and the second-class focus coordinates in the queue to obtain a third-class coordinate difference, and if the third-class coordinate difference is larger than a third distance threshold, determining that a third-class abnormity exists.
A determining module 540, configured to determine that there is a plug-in on the game client when there is a sudden change in the focus coordinate.
In a possible implementation manner of the present application, in order to reduce the false positive rate, the determining module is specifically configured to:
counting the times of the sudden change of the focus of the game client in a specified time period;
and if the times reach a preset value, determining that the focus on the game client is self-aiming externally hung.
The plug-in detection device provided by the embodiment is used for detecting whether a focus self-aiming plug-in exists in a game client, and acquiring focus coordinate data generated on a game picture when an external input body moves to obtain a first type of coordinate set; and acquiring the focus coordinate data in each frame of game image read by the game client to obtain a second type of coordinate set. When it is detected that the game client hits an enemy character, whether the focus coordinate in the game interface has a sudden change is judged by comparing the focus coordinate data in the first type of coordinate set and the second type of coordinate set, and if the focus coordinate has a sudden change, it is determined that the focus on the game client is self-aiming and externally hung. According to the scheme, the characteristic information of the focus self-aiming plug-in sample is not required to be learned in advance, so that the focus self-aiming plug-in sample data is not required to be collected, the time required in the learning and training process is saved, and the detection efficiency is improved.
On the other hand, the present application further provides a server (or referred to as a plug-in detection server), as shown in fig. 6, which shows a schematic structural diagram of a terminal of the present application, where the server of this embodiment may include: a processor 610 and a memory 620.
Optionally, the server may further comprise a communication interface 630, an input unit 640, and a display 650 and a communication bus 660.
The processor 610, the memory 620, the communication interface 630, the input unit 640 (such as a mouse, a keyboard, or a touch screen), and the display 650 are all in communication with each other via a communication bus 660.
In the embodiment of the present application, the processor 610 may be a Central Processing Unit (CPU), an application specific integrated circuit, a digital signal processor, an off-the-shelf programmable gate array or other programmable logic device, etc.
The processor may call a program stored in memory 620. Specifically, the processor may execute the operations executed by the plug-in detection client in the embodiment of the plug-in detection method.
The memory 620 is used for storing one or more programs, which may include program codes including computer operation instructions, and in this embodiment, the memory stores at least operations for implementing the external hanging detection server in the embodiment shown in fig. 3.
In one possible implementation, the memory 620 may include a program storage area and a data storage area, wherein the program storage area may store an operating system, an application program required by at least one function (such as an image playing function, etc.), and the like; the storage data area may store data created according to the use of the computer, such as user data and image data, etc.
Further, the memory 620 may include high speed random access memory, and may also include non-volatile memory, such as at least one magnetic disk storage device or other volatile solid state storage device.
The communication interface 620 may be an interface of a communication module, such as an interface of a GSM module.
The present application may also include a display 1104 and an input unit 1105, and the like.
Of course, the structure of the server shown in fig. 6 does not constitute a limitation to the terminal in the embodiment of the present application, and in practical applications, the terminal may include more or less components than those shown in fig. 6, or some components may be combined.
On the other hand, an embodiment of the present application further provides a storage medium, where computer-executable instructions are stored in the storage medium, and when the computer-executable instructions are loaded and executed by a processor, the plug-in detection method provided in any one of the above embodiments is implemented.
It should be noted that the technical features adopted in the embodiments in the present specification may be replaced with each other or arbitrarily combined. And each embodiment is mainly described as different from other embodiments, and the same and similar parts among the embodiments can be referred to each other. For the device-like embodiment, since it is basically similar to the method embodiment, the description is simple, and for the relevant points, reference may be made to the partial description of the method embodiment.
Finally, it should also be noted that, herein, relational terms such as first and second, and the like may be used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Also, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising an … …" does not exclude the presence of other identical elements in a process, method, article, or apparatus that comprises the element.
The previous description of the disclosed embodiments is provided to enable any person skilled in the art to make or use the present invention. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the generic principles defined herein may be applied to other embodiments without departing from the spirit or scope of the invention. Thus, the present invention is not intended to be limited to the embodiments shown herein but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.
The foregoing is only a preferred embodiment of the present invention, and it should be noted that it is obvious to those skilled in the art that various modifications and improvements can be made without departing from the principle of the present invention, and these modifications and improvements should also be considered as the protection scope of the present invention.

Claims (8)

1. A plug-in detection method is characterized by comprising the following steps:
acquiring focus coordinate data generated on a game picture when an external input body moves to obtain a first type coordinate set;
acquiring focus coordinate data read by a game client from each frame of game image to obtain a second type of coordinate set;
when it is detected that the game client side hits an enemy character, determining whether the focus coordinate has a sudden change according to the focus coordinate data in the first type of coordinate set and the second type of coordinate set, including:
determining whether a first-class abnormity exists according to a first-class focus coordinate in the first-class coordinate set, wherein the first-class abnormity is that the focus has mutation under the condition that an external input body does not have mutation;
determining whether a second type of abnormity exists according to a second type of focus coordinate in the second type of coordinate set, wherein the second type of abnormity is that the focus in two adjacent game images has sudden change;
determining whether a third type of abnormality exists according to the focus coordinate data in the same time period in the first type of coordinate set and the second type of coordinate set, wherein the third type of abnormality is a sudden change between a focus generated by an external input body and a focus read by a game client;
when the first type of abnormality, the second type of abnormality and the third type of abnormality exist at the same time, determining that the focus has a mutation;
and if the focus coordinate has a sudden change, determining that the game client has a plug-in.
2. The method of claim 1, wherein determining whether a first type of anomaly exists based on a first type of focus coordinate in the first type of coordinate set comprises:
calculating a first class coordinate difference between first class focus coordinates acquired at any two adjacent moments in the first class coordinate set, and determining that a first class abnormality exists if the first class coordinate difference is greater than a first distance threshold;
determining whether a second type of abnormality exists according to a second type of focus coordinate in the second type of coordinate set, including:
calculating a second type coordinate difference between second type focus coordinates corresponding to two adjacent game images, and if the second type coordinate difference is greater than a second distance threshold, determining that a second type anomaly exists;
determining whether a third type of abnormality exists according to the focus coordinate data in the first type of coordinate set and the second type of coordinate set, including:
and calculating a third type coordinate difference between the first type focus coordinate and the second type focus coordinate obtained in the same time period, and determining that a third type anomaly exists if the third type coordinate difference is greater than a third distance threshold.
3. The method according to claim 1, wherein the first type of focus coordinates and the second type of focus coordinates are stored in the same queue in order of acquisition time from early to late;
determining whether a first type of anomaly exists according to a first type of focus coordinate in the first type of coordinate set, comprising:
calculating a coordinate difference between two adjacent first-class focus coordinates stored in the queue to obtain a first-class coordinate difference, and determining that a first-class abnormality exists if the first-class coordinate difference is greater than a first distance threshold;
determining whether a second type of abnormality exists according to a second type of focus coordinate in the second type of coordinate set, including:
calculating a coordinate difference between two adjacent second focus coordinates in the queue to obtain a second type of coordinate difference, and if the second type of coordinate difference is greater than a second distance threshold, determining that a second type of abnormality exists;
determining whether a third type of abnormality exists according to the focus coordinate data in the first type of coordinate set and the second type of coordinate set, including:
and calculating a coordinate difference between the adjacent first-class focus coordinates and the second-class focus coordinates in the queue to obtain a third-class coordinate difference, and if the third-class coordinate difference is larger than a third distance threshold, determining that a third-class abnormity exists.
4. The method of claim 1, wherein acquiring focus coordinate data generated on the game screen when the external input body moves, resulting in a first type of coordinate set, comprises:
when the movement of an external input body is detected, acquiring screen focus coordinates obtained by an operating system and corresponding to the external input body after the movement;
and converting the screen focus coordinate into coordinate data in a game interface to obtain a first type of focus coordinate, and storing the first type of focus coordinate.
5. The method of claim 1, wherein obtaining focus coordinate data read by the game client from each frame of game image to obtain a second type of coordinate set comprises:
acquiring screen focus coordinates read by the game client from each frame of game image;
and converting the screen focus coordinate into coordinate data in a game interface to obtain a second type of focus coordinate, and storing the second type of focus coordinate.
6. An external hanging detection device, comprising:
the first-class coordinate acquisition module is used for acquiring focus coordinate data generated on a game picture when the external input body moves to obtain a first-class coordinate set;
the second-class coordinate acquisition module is used for acquiring the focus coordinate data read by the game client from each frame of game image to obtain a second-class coordinate set;
the detection module is used for determining whether the focus coordinate has a sudden change or not according to the focus coordinate data in the first type coordinate set and the second type coordinate set after detecting that the game client side hits an enemy character;
the determining module is used for determining that a plug-in exists on the game client when the focus coordinate has a sudden change;
the detection module is specifically configured to: determining whether a first-class abnormity exists according to a first-class focus coordinate in the first-class coordinate set, wherein the first-class abnormity is that the focus has mutation under the condition that an external input body does not have mutation; determining whether a second type of abnormity exists according to a second type of focus coordinate in the second type of coordinate set, wherein the second type of abnormity is that the focus in two adjacent game images has sudden change; determining whether a third type of abnormality exists according to the focus coordinate data in the same time period in the first type of coordinate set and the second type of coordinate set, wherein the third type of abnormality is a sudden change between a focus generated by an external input body and a focus read by a game client; and when the first type of abnormality, the second type of abnormality and the third type of abnormality exist at the same time, determining that the focus has a mutation.
7. A store detection system, comprising: the system comprises a plug-in detection client and a plug-in detection server;
the plug-in detection client is used for acquiring focus coordinate data generated on a game picture when the external input body moves to obtain a first type of coordinate set, and acquiring focus coordinate data read by the game client from each frame of game image to obtain a second type of coordinate set; after detecting that the game client side hits an enemy role, sending the first type of coordinate set and the second type of coordinate set to the plug-in detection server;
the plug-in server is used for determining whether the focus coordinate has mutation according to the focus coordinate data in the first type coordinate set and the second type coordinate set; if the focus coordinate has a sudden change, determining that a plug-in exists on the game client; determining whether the focus coordinate has a sudden change according to the focus coordinate data in the first type coordinate set and the second type coordinate set, wherein the determining comprises: determining whether a first-class abnormity exists according to a first-class focus coordinate in the first-class coordinate set, wherein the first-class abnormity is that the focus has mutation under the condition that an external input body does not have mutation; determining whether a second type of abnormity exists according to a second type of focus coordinate in the second type of coordinate set, wherein the second type of abnormity is that the focus in two adjacent game images has sudden change; determining whether a third type of abnormality exists according to the focus coordinate data in the same time period in the first type of coordinate set and the second type of coordinate set, wherein the third type of abnormality is a sudden change between a focus generated by an external input body and a focus read by a game client; and when the first type of abnormality, the second type of abnormality and the third type of abnormality exist at the same time, determining that the focus has a mutation.
8. The plug-in detection client is characterized by comprising a processor and a memory;
wherein the processor is configured to execute a program stored in the memory;
the memory is to store a program to at least:
acquiring focus coordinate data generated on a game picture when an external input body moves to obtain a first type coordinate set;
acquiring focus coordinate data read by a game client from each frame of game image to obtain a second type of coordinate set;
when it is detected that the game client side hits an enemy character, determining whether the focus coordinate has a sudden change according to the focus coordinate data in the first type of coordinate set and the second type of coordinate set, including:
determining whether a first-class abnormity exists according to a first-class focus coordinate in the first-class coordinate set, wherein the first-class abnormity is that the focus has mutation under the condition that an external input body does not have mutation;
determining whether a second type of abnormity exists according to a second type of focus coordinate in the second type of coordinate set, wherein the second type of abnormity is that the focus in two adjacent game images has sudden change;
determining whether a third type of abnormality exists according to the focus coordinate data in the same time period in the first type of coordinate set and the second type of coordinate set, wherein the third type of abnormality is a sudden change between a focus generated by an external input body and a focus read by a game client;
when the first type of abnormality, the second type of abnormality and the third type of abnormality exist at the same time, determining that the focus has a mutation;
and if the focus coordinate has a sudden change, determining that the game client has a plug-in.
CN202010230451.XA 2020-03-27 2020-03-27 Plug-in detection method and device Active CN111437609B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202010230451.XA CN111437609B (en) 2020-03-27 2020-03-27 Plug-in detection method and device

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202010230451.XA CN111437609B (en) 2020-03-27 2020-03-27 Plug-in detection method and device

Publications (2)

Publication Number Publication Date
CN111437609A CN111437609A (en) 2020-07-24
CN111437609B true CN111437609B (en) 2021-05-14

Family

ID=71649144

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202010230451.XA Active CN111437609B (en) 2020-03-27 2020-03-27 Plug-in detection method and device

Country Status (1)

Country Link
CN (1) CN111437609B (en)

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN115591229B (en) * 2022-10-31 2023-07-25 北京京航计算通讯研究所 Verification method and system for distributed network combat training

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109045703A (en) * 2018-07-24 2018-12-21 合肥爱玩动漫有限公司 A method of detection network game external store
CN109675317A (en) * 2017-10-18 2019-04-26 腾讯科技（深圳）有限公司 Detection method, server and the terminal of plug-in program
CN110812845A (en) * 2019-10-31 2020-02-21 腾讯科技（深圳）有限公司 Plug-in detection method, plug-in recognition model training method and related device
CN110909630A (en) * 2019-11-06 2020-03-24 腾讯科技（深圳）有限公司 Abnormal game video detection method and device

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20090150801A1 (en) * 2007-12-05 2009-06-11 International Business Machines Corporation System and method to handle vandalism in a virtual world

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109675317A (en) * 2017-10-18 2019-04-26 腾讯科技（深圳）有限公司 Detection method, server and the terminal of plug-in program
CN109045703A (en) * 2018-07-24 2018-12-21 合肥爱玩动漫有限公司 A method of detection network game external store
CN110812845A (en) * 2019-10-31 2020-02-21 腾讯科技（深圳）有限公司 Plug-in detection method, plug-in recognition model training method and related device
CN110909630A (en) * 2019-11-06 2020-03-24 腾讯科技（深圳）有限公司 Abnormal game video detection method and device

Also Published As

Publication number Publication date
CN111437609A (en) 2020-07-24

Similar Documents

Publication Publication Date Title
WO2019233354A1 (en) Application preloading method and device, storage medium and terminal
CN106326137B (en) Memory optimization method and device and user equipment
CN110865753B (en) Application message notification method and device
CN110909353B (en) Plug-in detection method and device
CN111437609B (en) Plug-in detection method and device
US20150207923A1 (en) Method, terminal and computer storage medium for triggering a communication with a contact
CN100375530C (en) Movement detecting method
CN113176847A (en) Method and equipment for preventing mistaken touch of ink screen
CN107992361B (en) Background application cleaning method and device, storage medium and electronic equipment
CN110275639B (en) Touch data processing method and device, terminal and storage medium
CN109710111B (en) False touch prevention method and electronic equipment
CN107943536B (en) Method and device for adjusting threshold, storage medium and electronic equipment
WO2023184833A1 (en) Detection result processing method and apparatus, device, medium, and computer program product
CN114998707B (en) Attack method and device for evaluating robustness of target detection model
JP2022529414A (en) Methods and systems for motion detection without malfunction
JP7323235B2 (en) Image tracking device, image tracking method, and program
CN112199131B (en) Page detection method, device and equipment
US10885160B1 (en) User classification
CN106598446B (en) Screenshot method and device
CN114740975A (en) Target content acquisition method and related equipment
CN112005296B (en) Selecting displays using machine learning
CN111124222B (en) Input switching method and device, electronic equipment and storage medium
CN113420615A (en) Face living body detection method and device
CN107506128B (en) Keyboard display method and mobile terminal
CN111274113B (en) State prediction method and device and mobile terminal

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant