CN104572394B - process monitoring method and device - Google Patents
process monitoring method and device Download PDFInfo
- Publication number
- CN104572394B CN104572394B CN201310522520.4A CN201310522520A CN104572394B CN 104572394 B CN104572394 B CN 104572394B CN 201310522520 A CN201310522520 A CN 201310522520A CN 104572394 B CN104572394 B CN 104572394B
- Authority
- CN
- China
- Prior art keywords
- monitoring
- subprocess
- data
- file
- environmental
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Landscapes
- Debugging And Monitoring (AREA)
Abstract
The embodiment of the present invention proposes that a kind of process monitoring method and device, its method include：Monitoring system parent process；When monitoring that parent process creates new subprocess, environment monitoring module is injected to new subprocess；Monitoring instruction is sent to environmental monitoring module, passes through environmental monitoring module monitors subprocess；And when the operation of subprocess meets environmental monitoring mould monitoring strategies in the block, obtain the operation data of subprocess.The present invention is by when parent process establishes subprocess, dynamically injecting monitoring programme to subprocess, without making any change to source code, in the case of not influencing normal operation, realizing the monitoring to system process, have relatively low technical risk, development cost is low.And when needing to update or repairing bug, substantial amounts of source code will not be involved, technical threshold is low, more convenient when changing and using.
Description
Technical field
The present invention relates to a kind of monitoring technology, more particularly to a kind of process monitoring method and device.
Background technology
With the development of mobile communication electronic technology, nowadays the mobile terminal using mobile phone as Typical Representative has not had singly
The function of distance communicating, the function of application on many PCs can be realized by mobile terminal, as user can
With by the browser browsed web content of mobile phone, by player plays video on mobile phone and music, pass through taking the photograph on mobile phone
As head is taken pictures etc..Therefore in order to grasp the operation conditions of smart mobile phone in all directions, to the process of application program in system
It is particularly important that management also becomes.
At present, the monitoring to mobile terminal system process is, it is necessary to change the bottom source code of operating system.With Android system
Exemplified by mobile phone, the prior art is by changing system zygote source codes（Zygote is the father of all application programs on Android system
Process, by changing the logic of zygote, can directly influence its all subprocess）Mode, realize the prisons of application processes
Control.
But due to needing to change operating system source code, different manufacturers has different customization requirements, develops
It is of high cost；Secondly because code is write extremely in systems, need to repair if necessary to version updating or there are bug, for
For ordinary user, technical threshold is very high, causes to use upper inconvenience.Further, since manufacturer have modified the bottom of operating system
Layer source code is, it is necessary to undertake more technical risks.
The content of the invention
The purpose of the embodiment of the present invention is to provide a kind of process monitoring method and device, existing to mobile terminal to solve
Process monitoring, it is necessary to change system source code, and caused by development cost is high, renewal modification inconvenience, the problem of technical risk is big.
The embodiment of the present invention proposes a kind of process monitoring method, including：
Monitoring system parent process；
When monitoring that parent process creates new subprocess, environment monitoring module is injected to new subprocess；
Monitoring instruction is sent to environmental monitoring module, passes through environmental monitoring module monitors subprocess；And
When the operation of subprocess meets environmental monitoring mould monitoring strategies in the block, the operation number of subprocess is obtained
According to.
The embodiment of the present invention also proposes a kind of process monitoring device, including：
Parent process monitoring unit, for monitoring system parent process；
Logic loading unit, for when the parent process monitoring unit monitors that parent process creates new subprocess, to
New subprocess injection environment monitoring module；
Control centre's unit, for sending monitoring instruction to environmental monitoring module, and passes through environmental monitoring module monitors
Process；And
Data capture unit, for when the operation of subprocess meets environmental monitoring mould monitoring strategies in the block, obtaining
Take the operation data of subprocess.
Relative to the prior art, the beneficial effects of the invention are as follows：The method and apparatus of the embodiment of the present invention, by father into
During Cheng Jianli subprocess, monitoring programme dynamically is injected to subprocess, without making any change to source code, does not influence normal operation
In the case of, realize the monitoring to system process, thus can be whole logic realization in an application program.Therefore, exist
In the case of not involving source code, it is only necessary to monitoring programme is designed merely, there is relatively low technical risk, development cost
It is low.And when needing to update or repairing bug, substantial amounts of source code will not be involved, technical threshold is low, when changing and using more
Add conveniently.
Brief description of the drawings
Fig. 1 is the flow chart of the first process monitoring method of the embodiment of the present invention；
Fig. 2 is the flow chart of second of process monitoring method of the embodiment of the present invention；
Fig. 3 is the flow chart of the third process monitoring method of the embodiment of the present invention；
Fig. 4 is the structure chart of the first process monitoring device of the embodiment of the present invention；
Fig. 5 is the structure chart of second of process monitoring device of the embodiment of the present invention.
Embodiment
For the present invention foregoing and other technology contents, feature and effect, in the following preferable reality coordinated with reference to schema
Applying during example describes in detail to be clearly presented.By the explanation of embodiment, when predetermined mesh can be reached to the present invention
The technological means taken and effect be able to more deeply and it is specific understand, but institute's accompanying drawings are only to provide with reference to saying
It is bright to be used, not it is used for being any limitation as the present invention.
Fig. 1 is referred to, it is the flow chart of the first process monitoring method of the embodiment of the present invention, it includes following step
Suddenly：
S101, monitoring system parent process.
S102, when monitoring that parent process creates new subprocess, injects environment monitoring module to new subprocess.
When monitoring parent process, the function that can monitor whether to create new process is called, such as the father of Android system such as
Process zygote, often produces a subprocess, it can all call this function of fork, thus only need to monitor whether fork is called
It can know whether that new subprocess wound is built.
S103, sends monitoring instruction to environmental monitoring module, passes through environmental monitoring module monitors subprocess.
When receiving monitoring instruction, environmental monitoring module will start to work, subprocess is monitored, to obtain needs
Data.Monitoring strategies are provided with the environmental monitoring module, such as monitor whether some function is called, or monitoring
Whether some file is operated.Monitoring strategies can be that to be set in advance in environmental monitoring mould in the block or pass through prison
Control instruction is transferred to environmental monitoring module.
S104, when the operation of subprocess meets environmental monitoring mould monitoring strategies in the block, obtains the fortune of subprocess
Row data.
The data of acquisition are for the management and analysis subsequently to subprocess operation conditions, such as pass through the analysis to data
Know the operational circumstances to some file, or viral dynamic behaviour data whether there is according to the operation data search of subprocess
Deng.
The scope of the operation data of the acquisition can be set accordingly in monitoring strategies.Such as to some file
Operation when being monitored, setting obtained to this context data to file whole operation event.And for example, during monitoring virus
All data that environmental monitoring module monitors arrive can be obtained.
The method of the present embodiment, by when parent process establishes subprocess, dynamically injecting monitoring programme, nothing to subprocess
It need to make any change to source code, in the case of not influencing normal operation, realize the monitoring to system process, thus can be whole
Logic realization is in an application program, such as APK（APK is application program Android file format）Form or kit jar
（Java Archive, archive file）Form.Therefore, in the case where not involving source code, it is only necessary to merely to monitoring journey
Sequence is designed, and has relatively low technical risk, and development cost is low.And when needing to update or repairing bug, it will not involve
To substantial amounts of source code, technical threshold is low, more convenient when changing and using.
Fig. 2 is referred to, it is the flow chart of second of process monitoring method of the embodiment of the present invention, it includes following step
Suddenly：
S201, monitoring system parent process.
S202, judges whether parent process calls the function for creating new process, if then entering step S203, if otherwise returning
Step S201.
S203, injects environment monitoring module to new subprocess.Monitoring is provided with the environmental monitoring module of the present embodiment
Allocation list, the monitoring allocation list are used to store user identifier（uid）, the monitoring information such as file path and monitoring rules.
S204, sends monitoring instruction to environmental monitoring module, whether text is called by environmental monitoring module monitors subprocess
Part handling function.File manipulation function such as open, unlink, rename, the function such as read, write.
S205, when subprocess calls file manipulation function, checks user identifier and the file road of file operation event
Whether footpath is consistent with the monitoring information stored in the monitoring allocation list, S206 is entered step if consistent, if inconsistent return
Return S204.
The monitoring information stored in monitoring allocation list can be configured by being sent to the monitoring instruction of environmental monitoring module.
Such as user be when will be monitored the operation behavior of some file, can by user identifier, the file path to be monitored and
One or more in the monitoring informations such as the handling function to be monitored, which are added in monitoring instruction, is sent to environmental monitoring module, and
By the configuration of environmental monitoring module in allocation list is monitored.Assuming that one group of monitoring information in monitoring allocation list includes：User A, text
Part path B, handling function open, then when When subroutine calls open functions, can check user identifier in action event and
Whether file path is respectively A and B, on the contrary then inconsistent if then consistent.
S206, obtains the context data of file operation event.The data of acquisition include but are not limited to file operation ID
（The numbering of open, unlink, rename function）, file path, action event, user identifier uid and Process identifier pid
Deng.
The method of the present embodiment can realize the monitoring carried out to the file operation behavior in process, based on without changing source
Code the characteristics of, have the advantages that technical risk is low, development cost is low, technical threshold is low, change and it is easy to use.It is additionally, since
Using Dynamic injection technology, so the file path to be monitored need not be preassigned, but can by user needs when
Wait dynamic to specify, have very strong interactive.
Fig. 3 is referred to, it is the flow chart of the third process monitoring method of the embodiment of the present invention, it includes following step
Suddenly：
S301, monitoring system parent process.
S302, when monitoring that parent process creates new subprocess, injects environment monitoring module to new subprocess.
S303, sends monitoring instruction to environmental monitoring module, passes through environmental monitoring module monitors subprocess.In this implementation,
Environmental monitoring mould monitoring strategies in the block are to monitor all operation conditions of subprocess.
S304, obtains all data that the environmental monitoring module monitors arrive.
S305, filters the data of acquisition.The purpose of filtering be in order to improve the validity for the data being collected into, with
Operand and error rate when reducing subsequently to these data analyses.For example the daily record data to being repeated in the unit interval is gone
Weight.
Collection and test of the method for the present embodiment especially suitable for big data quantity, such as divide using to daily record data
Analysis, searches whether there are viral dynamic behaviour data.Due to being monitored using Dynamic injection technology, it is not necessary to modify system source
Code, reduces development cost and technical risk, has been also convenient for renewal and modification to monitoring programme.
The embodiment of the present invention also proposes a kind of process monitoring device, refers to Fig. 4, it includes：Parent process monitoring unit 41,
Logic loading unit 42, control centre's unit 43 and data capture unit 44.
Parent process monitoring unit 41 is used for monitoring system parent process.Specifically, parent process monitoring unit 41 can to father into
Whether journey, which creates new subprocess, is monitored, such as whether monitoring parent process calls the function for creating subprocess.
Logic loading unit 42 is used for when parent process monitoring unit 41 monitors that parent process creates new subprocess, Xiang Xin
Subprocess injection environment monitoring module.Monitoring strategies are provided with the environmental monitoring module, it is used for the fortune to subprocess
Row is monitored and the data of needs is acquired.
Control centre's unit 43 is used to send monitoring instruction to environmental monitoring module, and passes through environmental monitoring module monitors
Process.Control centre's unit 43 can provide an interactive interface to the user, and allow user to set monitoring strategies, as monitored
Object, function etc., and together it is sent to environmental monitoring module by monitoring instruction.
Data capture unit 44 is used to, when the operation of subprocess meets environmental monitoring mould monitoring strategies in the block, obtain
Take the operation data of subprocess.The data of acquisition are for the management and analysis subsequently to subprocess operation conditions, such as are passed through
The operational circumstances to some file are known in analysis to data, or according to the operation data search of subprocess with the presence or absence of virus
Dynamic behaviour data etc..The scope of the operation data of the acquisition can be set accordingly in monitoring strategies.
By taking the monitoring to file operation as an example, when parent process monitoring unit 41 monitors that parent process creates new subprocess
When, logic loading unit 42 can be by environmental monitoring module loading into newly-built subprocess.Then, control centre's unit 43 can be with
Interactive interface is provided a user, so that user inputs the monitoring informations such as the file to be monitored, path, operation, is then supervised these
Control information is added in monitoring instruction, and is sent to environmental monitoring module.Environmental monitoring module starts after receiving monitoring instruction
Whether work, monitoring subprocess call the file manipulation functions such as default open, unlink, rename, read, write.Work as text
When part handling function is called, it can be compared with the monitoring allocation list set in environmental monitoring module, check action event
Whether user identifier and file path and the monitoring information stored in the monitoring allocation list are consistent.The data acquisition if consistent
Unit 44 can obtain the context data of this document action event, for customer analysis or use.
And for example with the viral dynamic behaviour data instance of monitoring, when parent process monitoring unit 41 monitors that parent process creates newly
Subprocess when, logic loading unit 42 can by environmental monitoring module loading into newly-built subprocess.Control centre's unit 43
After sending monitoring instruction to environmental monitoring module, the dynamic behaviour data of environmental monitoring module monitors subprocess can be passed through.And by
Data capture unit 44 obtains these dynamic behaviour data that environmental monitoring module monitors arrive, so that whether customer analysis is wherein deposited
In viral dynamic behaviour data.
The device of the present embodiment, by when parent process establishes subprocess, dynamically injecting monitoring programme, nothing to subprocess
It need to make any change to source code, in the case of not influencing normal operation, realize the monitoring to system process, thus can be whole
Logic realization is in an application program, such as APK（APK is application program Android file format）Form or kit jar
（Java Archive, archive file）Form.Therefore, in the case where not involving source code, it is only necessary to merely to monitoring journey
Sequence is designed, and has relatively low technical risk, and development cost is low.And when needing to update or repairing bug, it will not involve
To substantial amounts of source code, technical threshold is low, more convenient when changing and using.
Fig. 5 is referred to, it is the structure chart of second of process monitoring device of the embodiment of the present invention, the embodiment with Fig. 4
Compare, the device of the present embodiment further includes filter element 45, and filter element 45 is used for the data obtained to data capture unit 44
Filtered.The purpose of filtering be in order to improve the validity for the data being collected into, with reduce subsequently to these data analyses when
Operand and error rate.For example the daily record data to being repeated in the unit interval carries out duplicate removal.Other knots of the present embodiment device
Structure is identical with the embodiment of Fig. 4 with function, and details are not described herein.
Through the above description of the embodiments, those skilled in the art can be understood that the embodiment of the present invention
It by hardware realization, can also add the mode of necessary general hardware platform by software to realize.Based on such reason
Solution, the technical solution of the embodiment of the present invention can be embodied in the form of software product, which can be stored in one
A non-volatile memory medium（Can be CD-ROM, USB flash disk, mobile hard disk etc.）In, including some instructions are used so that a meter
Calculate machine equipment（Can be personal computer, server, or network equipment etc.）Perform each implement scene institute of the embodiment of the present invention
The method stated.
The above described is only a preferred embodiment of the present invention, not make limitation in any form to the present invention, though
So the present invention is disclosed above with preferred embodiment, but is not limited to the present invention, any to be familiar with this professional technology people
Member, is not departing from the range of technical scheme, when the technology contents using the disclosure above make a little change or modification
For the equivalent embodiment of equivalent variations, as long as being the technical spirit pair according to the present invention without departing from technical scheme content
Any simple modification, equivalent change and modification that above example is made, in the range of still falling within technical solution of the present invention.
Claims (4)
- A kind of 1. process monitoring method, it is characterised in that including：Monitoring system parent process；Specifically include：The function for monitoring whether to create new process is called, new to know whether Subprocess is created；When monitoring that parent process creates new subprocess, that is, when monitoring that parent process calls the function for creating new process, dynamic Ground injects environment monitoring module to new subprocess；Monitoring instruction is sent to environmental monitoring module, is supervised by environmental monitoring module Whether the operation conditions or monitoring subprocess for controlling subprocess call file manipulation function；Wherein, set in the environmental monitoring module Monitoring strategies are equipped with, monitoring strategies are to be set in advance in environmental monitoring module or be transferred to environmental monitoring mould by monitoring instruction Block；When the operation of subprocess meets environmental monitoring mould monitoring strategies in the block, the environmental monitoring module monitors are obtained All data for arriving or when subprocess calls file manipulation function, whether verification file operation event meets environmental monitoring module In monitoring strategies, and in file operation event matches monitoring strategies, obtain the context data of file operation event；The data of acquisition are filtered, to improve the validity for the data being collected into, when reducing subsequently to these data analyses Operand and error rate；Subprocess operation conditions is managed and analyzed, the operational circumstances to some file are known by the analysis to data, Or viral dynamic behaviour data whether there is according to the operation data search of subprocess.
- 2. process monitoring method as claimed in claim 1, it is characterised in that be provided with monitoring in the environmental monitoring module and match somebody with somebody Table is put, the monitoring allocation list is used to store the monitoring information, and the monitoring information includes user identifier and file path；The step of whether the verification file operation event meets environmental monitoring mould monitoring strategies in the block includes：Check file behaviour Whether user identifier and the file path for making event are consistent with the monitoring information stored in the monitoring allocation list.
- A kind of 3. process monitoring device, it is characterised in that including：Parent process monitoring unit, for monitoring system parent process；Specifically include：The function for monitoring whether to create new process is adjusted With being created with the subprocess for knowing whether new；Logic loading unit, for when the parent process monitoring unit monitors that parent process creates new subprocess, that is, monitoring When calling the function for creating new process to parent process, dynamically environment monitoring module is injected to new subprocess；Control centre's unit, monitoring instruction is sent to environmental monitoring module, and passes through the fortune of environmental monitoring module monitors subprocess Whether row situation or monitoring subprocess call file manipulation function；Wherein, monitoring strategies are provided with the environmental monitoring module, Monitoring strategies are to be set in advance in environmental monitoring module or be transferred to environmental monitoring module by monitoring instruction；Data capture unit, for when the operation of subprocess meets environmental monitoring mould monitoring strategies in the block, obtaining institute State all data that environmental monitoring module monitors arrive or call file manipulation function in subprocess and file operation event matches are supervised During control strategy, the context data of file operation event is obtained；It is additionally operable to that subprocess operation conditions is managed and analyzed, leads to Cross the analysis to data and know operational circumstances to some file, or according to the operation data search of subprocess with the presence or absence of disease Malicious dynamic behaviour data；Filter element, for being filtered to the data of acquisition, to improve the validity for the data being collected into, reduces subsequently to this Operand and error rate during a little data analyses.
- 4. process monitoring device as claimed in claim 3, it is characterised in that be provided with monitoring in the environmental monitoring module and match somebody with somebody Table is put, the monitoring allocation list is used to store the monitoring information, and the monitoring information includes user identifier and file path；The data capture unit calls file manipulation function, and the user identifier and file of file operation event in subprocess When path is consistent with the monitoring information stored in the monitoring allocation list, the context data of file operation event is obtained.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201310522520.4A CN104572394B (en) | 2013-10-29 | 2013-10-29 | process monitoring method and device |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201310522520.4A CN104572394B (en) | 2013-10-29 | 2013-10-29 | process monitoring method and device |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN104572394A CN104572394A (en) | 2015-04-29 |
| CN104572394B true CN104572394B (en) | 2018-04-27 |
Family
ID=53088528
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201310522520.4A Active CN104572394B (en) | 2013-10-29 | 2013-10-29 | process monitoring method and device |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN104572394B (en) |
Families Citing this family (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN105045686B (en) * | 2015-08-28 | 2019-03-01 | 小米科技有限责任公司 | File access pattern method and device |
| CN105095025B (en) * | 2015-08-28 | 2018-11-02 | 小米科技有限责任公司 | Restore the method and device of deleted document in ext file system |
| CN105574406A (en) * | 2015-12-23 | 2016-05-11 | 北京奇虎科技有限公司 | Progress monitoring method and device |
| CN105701401B (en) * | 2015-12-29 | 2019-04-26 | 联想(北京)有限公司 | Android device and its control method and control device |
| CN106681801B (en) * | 2016-05-09 | 2019-07-23 | 腾讯科技（深圳）有限公司 | The execution method and apparatus of event |
| CN108197041B (en) * | 2017-12-28 | 2021-09-28 | 北京奇虎科技有限公司 | Method, device and storage medium for determining parent process of child process |
| CN110990874A (en) * | 2019-12-04 | 2020-04-10 | 厦门安胜网络科技有限公司 | Safety protection method and system for Android file |
| CN111177665B (en) * | 2019-12-27 | 2022-02-11 | 浙大网新科技股份有限公司 | Safety tracing method for newly generated executable file |
Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101290587A (en) * | 2008-06-12 | 2008-10-22 | 中兴通讯股份有限公司 | Realization progress start-up and control process |
| CN102314561A (en) * | 2010-07-01 | 2012-01-11 | 电子科技大学 | Automatic analysis method and system of malicious codes based on API (application program interface) HOOK |
Family Cites Families (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US6704806B1 (en) * | 1999-05-27 | 2004-03-09 | Computer Associates Think, Inc. | Method and device for monitoring the creation and destruction of child processes within an application executing in a computer system |
| EP1543392A1 (en) * | 2002-06-28 | 2005-06-22 | Umetrics AB | Method and device for monitoring and fault detection in industrial processes |
| CN1217265C (en) * | 2002-08-19 | 2005-08-31 | 万达信息股份有限公司 | Process automatic restoring method |
| CN101859275A (en) * | 2010-03-08 | 2010-10-13 | 宇龙计算机通信科技(深圳)有限公司 | Method, system and mobile terminal for monitoring application program |
-
2013
- 2013-10-29 CN CN201310522520.4A patent/CN104572394B/en active Active
Patent Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101290587A (en) * | 2008-06-12 | 2008-10-22 | 中兴通讯股份有限公司 | Realization progress start-up and control process |
| CN102314561A (en) * | 2010-07-01 | 2012-01-11 | 电子科技大学 | Automatic analysis method and system of malicious codes based on API (application program interface) HOOK |
Also Published As
| Publication number | Publication date |
|---|---|
| CN104572394A (en) | 2015-04-29 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN104572394B (en) | process monitoring method and device | |
| US20160364576A1 (en) | Operating large scale systems and cloud services with zero-standing elevated permissions | |
| CN102460382B (en) | Annotating virtual application processes | |
| CN107733985B (en) | Method and device for deploying functional components of cloud computing system | |
| WO2021072861A1 (en) | Application service processing method and apparatus, and terminal and storage medium | |
| CN111782416B (en) | Data reporting method, device, system, terminal and computer readable storage medium | |
| CN104462980A (en) | Authority management method, device and system of application programs and mobile terminal | |
| CN104602131A (en) | Barrage processing method and system | |
| CN104049986A (en) | Plugin loading method and device | |
| CN103425468B (en) | Plug-in type software integrating method and device | |
| WO2019051948A1 (en) | Method, apparatus, server, and storage medium for processing monitoring data | |
| CN107645546B (en) | File monitoring method based on android system, intelligent device and storage medium | |
| CN102831021A (en) | Method and device for interrupting or cleaning plugin | |
| CN103581187A (en) | Method and system for controlling access rights | |
| CN106685894B (en) | Risk identification method, device and system | |
| CN110659259A (en) | Database migration method, server and computer storage medium | |
| CN102508768A (en) | Monitoring method and monitoring device for application program | |
| CN102868699A (en) | Method and tool for vulnerability detection of server providing data interaction services | |
| WO2018000524A1 (en) | Backup file method and apparatus | |
| CN112241373A (en) | Automatic test method, test device, processor and test system | |
| CN103902903A (en) | Malicious code analyzing method and system based on dynamic sandbox environment | |
| CN104239112B (en) | A kind of installation method of device drive program and device | |
| KR101434094B1 (en) | Blocking harmful application by intent monitoring in android platform | |
| CN106778270B (en) | Malicious application detection method and system | |
| CN114978963A (en) | Network system monitoring analysis method and device, electronic equipment and storage medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |