CN105335259A

CN105335259A - Method and device for determining whether malicious behaviors exist in performance evaluation process of electronic equipment

Info

Publication number: CN105335259A
Application number: CN201410376770.6A
Authority: CN
Inventors: 王颢
Original assignee: BEIJING ANTUTU TECHNOLOGY Co Ltd
Current assignee: BEIJING ANTUTU TECHNOLOGY Co Ltd
Priority date: 2014-08-01
Filing date: 2014-08-01
Publication date: 2016-02-17
Anticipated expiration: 2034-08-01
Also published as: CN105335259B

Abstract

The invention discloses a method and device for determining whether malicious behaviors exist in performance evaluation process of electronic equipment. The method comprises the following steps: obtaining at least one target parameter value of the target performance parameters of the electronic equipment in the performance evaluation process of the electronic equipment; obtaining at least one pre-stored reference parameter value of the target performance parameters when the electronic equipment is in a normal state without performance evaluation; and determining whether malicious behaviors exist in the performance evaluation process of the electronic equipment according to the at least one target parameter value and the at least one reference parameter value of the target performance parameters. According to the method, the user can judge whether the performance evaluation result is real and reliable, so that the method is good in universality and strong in practicability.

Description

Method and device for determining whether malicious behaviors exist in electronic equipment performance evaluation process

Technical Field

The invention relates to the field of electronic equipment performance evaluation, in particular to a method and a device for determining whether malicious behaviors exist in the electronic equipment performance evaluation process.

Background

With the development of communication technology and internet technology, electronic devices have become an essential part of people's lives. At present, the types and models of electronic devices are increasing, and in order to enable users to better understand the performance of the electronic devices, technicians develop some evaluation software, and the evaluation results such as performance parameter information, various performance evaluation scores and the like of the electronic devices can be obtained by running the evaluation software on the electronic devices. The user can know the performance of the electronic equipment by checking the evaluation result, and reference is provided for the user to purchase the phone or know the performance of the electronic equipment at any time.

However, in order to make the electronic device have a better evaluation result when the evaluation software is used for evaluation, an electronic device manufacturer may implant a monitoring program into the electronic device, and when the evaluation software is monitored for testing, the monitoring program automatically changes target performance parameters of the electronic device, for example, the operating frequency of the CPU and the GPU is increased, so that the electronic device is in an operating state higher than a normal application scene, and finally the evaluation result of the evaluation software on the electronic device is not true, thereby misleading a user.

Therefore, in order to provide a real evaluation result for a user, when the electronic device is tested by using the evaluation software, a need exists for judging whether the electronic device has malicious behaviors.

Disclosure of Invention

In order to solve the above problems, the embodiment of the invention discloses a method and a device for determining whether a malicious behavior exists in the performance evaluation process of electronic equipment. The technical scheme is as follows:

the method for determining whether the malicious behavior exists in the electronic equipment performance evaluation process can comprise the following steps:

in the performance evaluation process of the electronic equipment, at least one target parameter value of a target performance parameter of the electronic equipment is obtained;

obtaining at least one reference parameter value of the target performance parameter, which is stored in advance and is in a normal state without performance evaluation of the electronic equipment;

and determining whether malicious behaviors exist in the performance evaluation process of the electronic equipment according to the at least one target parameter value and the at least one reference parameter value of the target performance parameter.

In a preferred embodiment of the present invention, the determining whether there is a malicious behavior in the performance evaluation process of the electronic device according to the at least one target parameter value and the at least one reference parameter value of the target performance parameter includes:

judging whether the at least one target parameter value and the at least one reference parameter value of the target performance parameter meet preset judgment conditions corresponding to the target performance parameter, and if so, determining that malicious behaviors exist in the performance evaluation process of the electronic equipment; otherwise, determining that no malicious behavior exists in the performance evaluation process of the electronic equipment.

judging whether at least one target parameter value and at least one reference parameter value of a target performance parameter to be judged accord with a judgment condition corresponding to the preset target performance parameter to be judged, and if so, determining that malicious behaviors exist in the performance evaluation process of the electronic equipment;

if not, further detecting whether the target performance parameters which are not judged exist,

if yes, determining the target performance parameter which is not judged yet as a target performance parameter to be judged, and continuously executing the step of judging whether at least one target parameter value and at least one reference parameter value of the target performance parameter to be judged meet the judgment condition corresponding to the target performance parameter to be judged;

and if not, determining that no malicious behavior exists in the performance evaluation process of the electronic equipment.

In a preferred embodiment of the present invention, the target performance parameters include: at least one of CPU operating frequency, GPU operating frequency, device temperature, and power consumption per unit time.

In a preferred embodiment of the present invention,

in the case that the target performance parameter comprises a CPU operating frequency:

at least one target parameter value of the CPU working frequency comprises the maximum value of the CPU working frequency in the performance evaluation process of the electronic equipment;

at least one reference parameter value of the CPU working frequency comprises the maximum value of the CPU working frequency when the electronic equipment is in a normal state without performance evaluation;

the judgment conditions are as follows: the difference value between the maximum value of the CPU working frequency in the performance evaluation process of the electronic equipment and the maximum value of the CPU working frequency when the electronic equipment is in a normal state without performance evaluation is larger than a preset first threshold value;

or,

at least one target parameter value of the CPU working frequency comprises a constant value which is always kept by the CPU working frequency in the performance evaluation process of the electronic equipment;

the judgment conditions are as follows: the constant value of the CPU working frequency always kept in the performance evaluation process of the electronic equipment is the same as the maximum value of the CPU working frequency when the electronic equipment is in a normal state without performance evaluation;

in the case that the target performance parameter comprises a GPU operating frequency:

at least one target parameter value of the GPU working frequency comprises the maximum value of the GPU working frequency in the performance evaluation process of the electronic equipment;

the at least one reference parameter value of the GPU working frequency comprises the maximum value of the GPU working frequency when the electronic equipment is in a normal state without performance evaluation;

the judgment conditions are as follows: in the performance evaluation process of the electronic equipment, the difference value between the maximum value of the GPU working frequency and the maximum value of the CPU working frequency when the electronic equipment is in a normal state without performance evaluation is larger than a preset second threshold value;

or,

at least one target parameter value of the GPU working frequency comprises a constant value which is always kept by the GPU working frequency in the performance evaluation process of the electronic equipment;

the judgment conditions are as follows: the constant value of the GPU working frequency always kept in the performance evaluation process of the electronic equipment is the same as the maximum value of the GPU working frequency when the electronic equipment is in a normal state without performance evaluation;

in the case that the target performance parameter comprises a device temperature:

the at least one target parameter value of the equipment temperature comprises the maximum value of the equipment temperature in the performance evaluation process of the electronic equipment;

the at least one reference parameter value of the equipment temperature comprises the maximum value of the equipment temperature when the electronic equipment is in a normal state without performance evaluation;

the judgment conditions are as follows: the difference value between the maximum value of the equipment temperature in the performance evaluation process of the electronic equipment and the maximum value of the equipment temperature when the electronic equipment is in a normal state without performance evaluation is larger than a preset third threshold value;

in the case where the target performance parameter comprises power consumption per unit time:

the at least one target parameter value of the power consumption per unit time comprises the maximum value of the power consumption per unit time in the performance evaluation process of the electronic equipment;

the at least one reference parameter value of the power consumption per unit time comprises the maximum value of the power consumption per unit time when the electronic equipment is in a normal state without performance evaluation;

the judgment conditions are as follows: and in the performance evaluation process of the electronic equipment, the difference value between the maximum value of the power consumption per unit time and the maximum value of the power consumption per unit time when the electronic equipment is in a normal state without performance evaluation is larger than a preset fourth threshold value.

In a preferred embodiment of the present invention, in the case where the target performance parameter includes a CPU operating frequency:

at least one target parameter value of the CPU working frequency comprises a frequency value adopted by the CPU working frequency in the performance evaluation process of the electronic equipment;

the judgment conditions are as follows: at least one target parameter value and at least one reference parameter value of the CPU working frequency meet at least one of a first judgment condition and a second judgment condition, wherein the first judgment condition is that: in the performance evaluation process of the electronic equipment, the difference value between the maximum value of the frequency values adopted by the CPU working frequency and the maximum value of the CPU working frequency when the electronic equipment is in a normal state without performance evaluation is larger than a preset first threshold value;

the second determination condition is: and in the performance evaluation process of the electronic equipment, the frequency value adopted by the CPU working frequency is constant, and the frequency value adopted by the CPU working frequency is the same as the maximum value of the CPU working frequency when the electronic equipment is in a normal state without performance evaluation.

In a preferred embodiment of the present invention, in case that the target performance parameter includes a GPU operating frequency:

at least one target parameter value of the GPU working frequency comprises a frequency value adopted by the GPU working frequency in the performance evaluation process of the electronic equipment;

the judgment conditions are as follows: at least one target parameter value and at least one reference parameter value of the GPU operating frequency meet at least one of a third judgment condition and a fourth judgment condition, wherein the third judgment condition is that: in the performance evaluation process of the electronic equipment, the difference value between the maximum value of the frequency values adopted by the GPU working frequency and the maximum value of the CPU working frequency when the electronic equipment is in a normal state without performance evaluation is larger than a preset second threshold value;

the fourth determination condition is: and in the performance evaluation process of the electronic equipment, the frequency value adopted by the GPU working frequency is constant, and the frequency value adopted by the GPU working frequency is the same as the maximum value of the GPU working frequency when the electronic equipment is in a normal state without performance evaluation.

In a preferred embodiment of the present invention, the target performance parameter includes a CPU core turn-on number;

at least one target parameter value of the CPU core opening number comprises the actual CPU core opening number in the performance evaluation process of the electronic equipment;

at least one reference parameter value of the CPU core opening number comprises the actual CPU core opening number when the electronic equipment is in a normal state without performance evaluation;

the judgment conditions are as follows: in the performance evaluation process of the electronic equipment, the actual starting number of the CPU cores is larger than that of the CPU cores when the electronic equipment is in a normal state without performance evaluation.

In a preferred embodiment of the present invention, the obtaining at least one pre-stored reference parameter value of the target performance parameter when the electronic device is in a normal state without performance evaluation includes:

at least one reference parameter value of the target performance parameter is obtained from local, wherein the reference parameter value is pre-stored when the electronic equipment is in a normal state without performance evaluation;

or

And acquiring at least one reference parameter value of the target performance parameter, which is stored in advance and is in a normal state without performance evaluation, of the electronic equipment from a server.

Corresponding to the above method, the present invention also provides a device for determining whether a malicious behavior exists in the performance evaluation process of an electronic device, including:

the target parameter value obtaining module is used for obtaining at least one target parameter value of a target performance parameter of the electronic equipment in the performance evaluation process of the electronic equipment;

a reference parameter value obtaining module, configured to obtain at least one reference parameter value of the target performance parameter, where the reference parameter value is stored in advance and is in a normal state where performance evaluation is not performed on the electronic device;

and the malicious behavior determining module is used for determining whether malicious behaviors exist in the performance evaluation process of the electronic equipment according to the at least one target parameter value and the at least one reference parameter value of the target performance parameter.

In a preferred embodiment of the present invention, the malicious behavior determination module includes:

the first malicious behavior determining unit is used for judging whether the at least one target parameter value and the at least one reference parameter value of the target performance parameter meet preset judgment conditions corresponding to the target performance parameter or not, and if so, determining that malicious behaviors exist in the performance evaluation process of the electronic equipment; otherwise, determining that no malicious behavior exists in the performance evaluation process of the electronic equipment.

the second malicious behavior determining unit is used for judging whether at least one target parameter value and at least one reference parameter value of the target performance parameter to be judged meet the judgment condition corresponding to the preset target performance parameter to be judged, and if so, determining that malicious behaviors exist in the performance evaluation process of the electronic equipment;

In a preferred embodiment of the present invention,

or,

In a preferred embodiment of the present invention, the reference parameter value obtaining module includes:

a first reference parameter value obtaining unit, configured to locally obtain at least one reference parameter value of the target performance parameter, where the reference parameter value is pre-stored and is in a normal state where performance evaluation is not performed on the electronic device;

or

And the second reference parameter value obtaining unit is used for obtaining at least one reference parameter value of the target performance parameter from a server, wherein the reference parameter value is stored in advance and is used for the electronic equipment in a normal state without performance evaluation.

The method and the device provided by the embodiment of the invention determine whether malicious behaviors exist in the performance evaluation process of the electronic equipment by obtaining at least one target parameter value of the target performance parameter in the performance evaluation process of the electronic equipment and at least one reference parameter value of the target performance parameter when the electronic equipment is in a normal state without performance evaluation, and further can judge whether the evaluation result of the performance evaluation of the electronic equipment is real and reliable, and have good universality and strong practicability.

Drawings

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly described below, it is obvious that the drawings in the following description are only some embodiments of the present invention, and for those skilled in the art, other drawings can be obtained according to the drawings without creative efforts.

Fig. 1 is a first flowchart of a method for determining whether a malicious behavior exists in a performance evaluation process of an electronic device according to an embodiment of the present invention;

FIG. 2 is a second flowchart of a method for determining whether a malicious behavior exists in a performance evaluation process of an electronic device according to an embodiment of the present invention;

FIG. 3 is a third flowchart of a method for determining whether a malicious behavior exists in a performance evaluation process of an electronic device according to an embodiment of the present invention;

fig. 4 is a schematic structural diagram of an apparatus for determining whether a malicious behavior exists in a performance evaluation process of an electronic device according to an embodiment of the present invention.

Detailed Description

The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.

In order to determine whether an evaluation result of performance evaluation of electronic equipment is real and reliable, the embodiment of the invention provides a method for determining whether malicious behaviors exist in the performance evaluation process of the electronic equipment. The malicious behavior may be caused by malicious software built into the electronic device by the manufacturer of the electronic device before the electronic device is shipped, and the malicious software is often a part of the system, and may be third-party software.

It can be understood that the method for determining whether malicious behaviors exist in the electronic declaration performance evaluation process provided by the embodiment of the present invention may be executed by an electronic device, and specifically may be executed by application software installed on the electronic device, for example, performance evaluation software. As shown in fig. 1, the method may include:

s101, in the performance evaluation process of the electronic equipment, at least one target parameter value of the target performance parameter of the electronic equipment is obtained.

The performance evaluation may be performed by performance evaluation software installed on the electronic device, and the content of the performance evaluation on the electronic device may include CPU integer arithmetic performance, CPU floating point arithmetic performance, RAM speed performance, RAM arithmetic performance, 2D graphics performance of the GPU, 3D graphics performance of the GPU, database I/O performance, memory I/O performance, or the like, or the combination of the above. Of course, the invention need not be specifically limited herein to the specific details of the performance evaluation.

In this step, when a user performs performance evaluation on the electronic device, at least one target parameter value of the target performance parameter is obtained first.

The target performance parameters may be parameters that can represent the performance of the electronic device during operation, such as CPU operating frequency, GPU operating frequency, device temperature, power consumption per unit time, and the like, and it should be noted that, in addition to the above-mentioned parameters, other parameters that can represent the performance of the electronic device are also applicable to the technical solution of the present invention, for example, the number of CPU cores turned on, and the specific form of the parameters should not be a limitation to the technical solution of the present invention. One skilled in the art can select one or more performance parameters based on the actual situation.

The target parameter value is a parameter value adopted by the target performance parameter of the electronic equipment in the performance evaluation process of the electronic equipment. Specifically, when the target parameter value is obtained, the target parameter value of the target performance parameter may be obtained in real time in the performance evaluation process of the electronic device, that is, the target parameter value is obtained and stored continuously, or may be obtained once every certain period of time, for example, once every 10 seconds, or of course, the target parameter value may be obtained only once in the performance evaluation process of the whole electronic device.

The specific implementation of this step can be implemented by using the related technical solutions in the prior art, and the embodiments of the present invention are not specifically limited herein.

S102, at least one reference parameter value of the target performance parameter is obtained, wherein the reference parameter value is stored in advance and is used for the electronic equipment in a normal state without performance evaluation.

In order to compare with a target parameter value of a target performance parameter in a performance evaluation process, in the embodiment of the invention, in the daily use process of electronic equipment, namely when the electronic equipment is in a normal state without performance evaluation, at least one reference parameter value of the target performance parameter can be recorded and stored, and then when whether malicious behaviors exist in the performance evaluation process of the electronic equipment is determined, the reference parameter values are obtained.

The target performance parameter in this step is consistent with the target performance parameter in step S101, and may be some parameters that can embody the performance of the electronic device during the operation process of the electronic device, for example, the CPU operating frequency, the GPU operating frequency, the device temperature, the power consumption per unit time, the number of CPU cores turned on, and the like. One skilled in the art can select one or more performance parameters based on the actual situation.

When recording the reference parameter value, the reference parameter value may be acquired at intervals, for example, recorded at intervals of 10min, and data update may be performed periodically, so that the data may be more consistent with the latest performance state of the electronic device. Of course, when the pre-stored reference parameter values are obtained, the number of values may also be preset, for example, when the pre-stored reference parameter values are obtained, the latest 10 reference parameter values, specific records and schemes for obtaining the reference parameter values may be obtained, and those skilled in the art may select the reference parameter values according to actual situations.

The specific implementation of this step can be implemented by using the related technical solutions in the prior art, and this example is not limited in detail.

S103, determining whether a malicious behavior exists in the performance evaluation process of the electronic equipment according to the at least one target parameter value and the at least one reference parameter value of the target performance parameter.

In the performance evaluation process of the electronic equipment, after at least one target parameter value and at least one reference parameter value are obtained respectively, whether malicious behaviors exist in the electronic equipment can be determined according to the target parameter value and the reference parameter value.

In a specific implementation process, two technical schemes may be adopted for determining whether a malicious behavior exists in a performance evaluation process of the electronic device according to the target parameter value and the reference parameter value, where the first technical scheme is as shown in fig. 2, after S102 is executed, S103A is executed first, whether at least one target parameter value and at least one reference parameter value of the target performance parameter meet a determination condition corresponding to the target performance parameter is determined, if so, S104A is executed, it is determined that the malicious behavior exists in the performance evaluation process of the electronic device, and if not, S104B is executed, and it is determined that the malicious behavior does not exist in the performance evaluation process of the electronic device.

In this scheme, the target performance parameter may be one of a CPU operating frequency, a GPU operating frequency, a device temperature, a unit time power consumption amount, and a CPU core turn-on number, and may also include other parameters that embody the performance of the electronic device.

For example, when the target performance parameter is the CPU operating frequency, the scheme specifically includes: judging whether the target parameter value and the reference parameter value of the CPU working frequency accord with a judgment condition corresponding to the CPU working frequency, if so, determining that malicious behaviors exist in the performance evaluation process of the electronic equipment, otherwise, determining that the malicious behaviors do not exist in the performance evaluation process of the electronic equipment.

When the target performance parameter is other parameters, the technical scheme is similar to that when the target performance parameter is the operating frequency of the CPU, and the present invention is not described in detail herein.

As shown in fig. 3, after S102 is executed, S103B is executed first, and it is determined whether at least one target parameter value and at least one reference parameter value of the target performance parameter to be determined meet the determination condition corresponding to the target performance parameter to be determined, if so, S104C is executed to determine that a malicious behavior exists in the performance evaluation process of the electronic device; otherwise, executing S105, further detecting whether there is an undetermined target performance parameter, if so, executing S106, determining one undetermined target performance parameter as a target performance parameter to be determined, then continuing to execute S103B, continuing to execute determining whether at least one target parameter value and at least one reference parameter value of the target performance parameter to be determined meet a determination condition corresponding to the target performance parameter to be determined, if not, executing S107, and determining that there is no malicious behavior in the performance evaluation process of the electronic device.

In this embodiment, the target performance parameter may be at least one of a CPU operating frequency, a GPU operating frequency, a device temperature, a power consumption per unit time, and a CPU core turn-on number, preferably at least two, and may also include other parameters that represent the performance of the electronic device.

It should be noted that, when the second technical solution is applied, when at least two project performance parameters are included, the sequence of each target performance parameter is not limited, for example, when two performance parameters, including the CPU operating frequency and the device temperature, it may be determined whether a target parameter value of the CPU operating frequency and a reference parameter value meet a determination condition corresponding to the CPU operating frequency, if yes, it is determined that a malicious behavior exists in the performance evaluation process of the electronic device, otherwise, it is further determined whether the target parameter value of the device temperature and the reference parameter value meet the determination condition corresponding to the device temperature, if yes, it is determined that a malicious behavior exists in the performance evaluation process of the electronic device, otherwise, it is determined that a malicious behavior does not exist in the performance evaluation process of the electronic device. Or judging whether the target parameter value and the reference parameter value of the equipment temperature accord with a judgment condition corresponding to the equipment temperature, if so, determining that malicious behaviors exist in the performance evaluation process of the electronic equipment, otherwise, further judging whether the target parameter value and the reference parameter value of the CPU working frequency accord with the judgment condition corresponding to the CPU working frequency, if so, determining that the malicious behaviors exist in the performance evaluation process of the electronic equipment, otherwise, determining that the malicious behaviors do not exist in the performance evaluation process of the electronic equipment.

In an embodiment of the present invention, in the first technical means or the second technical means, when the target performance parameter includes a CPU operating frequency:

the at least one target parameter value of the CPU operating frequency includes a maximum value of the CPU operating frequency in the performance evaluation process of the electronic device, that is, a maximum value adopted by the CPU operating frequency in the performance evaluation process of the electronic device, and specifically may be a maximum value of the obtained target parameter values.

The at least one reference parameter value of the CPU operating frequency includes a maximum value of the CPU operating frequency when the electronic device is in a normal state without performance evaluation, that is, a maximum value adopted by the CPU operating frequency in a daily operating state of the electronic device, and may specifically be a maximum value of the acquired reference parameter values.

The determination condition corresponding to the CPU operating frequency may be: the difference value between the maximum value of the CPU working frequency in the performance evaluation process of the electronic equipment and the maximum value of the CPU working frequency when the electronic equipment is in a normal state without performance evaluation is larger than a preset first threshold value; the first threshold value can be determined by those skilled in the art according to the actual situation, and for example, the first threshold value can be 1%.

It can be understood that, in general, the higher the operating frequency of the CPU, the better the test result, so that, when performing performance evaluation on the electronic device, the purpose of obtaining a good evaluation result by cheating can be achieved by maliciously modifying the operating frequency of the CPU. Therefore, based on the above-mentioned decision conditions, it can be determined whether there is a malicious behavior in the evaluation process.

In one embodiment of the invention, where the target performance parameter comprises a CPU operating frequency:

at least one target parameter value of the CPU working frequency comprises a constant value which is always kept by the CPU working frequency in the performance evaluation process of the electronic equipment; namely, the CPU working frequency is always kept stable in the performance evaluation process of the electronic equipment, and the obtained multiple target parameter values are the same.

in this case, the determination condition corresponding to the CPU operating frequency may be: and in the performance evaluation process of the electronic equipment, the constant value of the CPU working frequency always kept is the same as the maximum value of the CPU working frequency when the electronic equipment is in a normal state without performance evaluation. It is easy to understand that, in the daily use process of the electronic device, the CPU operating frequency may change due to different use states of users. And because the CPU working frequency is always kept at the maximum value of the daily state in the evaluation process, the malicious behavior of modifying the CPU working frequency in the evaluation process can also be determined.

In another embodiment of the invention, where the target performance parameter comprises a CPU operating frequency:

the determination condition corresponding to the CPU operating frequency may be: at least one target parameter value and at least one reference parameter value of the CPU working frequency meet at least one of a first judgment condition and a second judgment condition, wherein the first judgment condition is that: in the performance evaluation process of the electronic equipment, the difference value between the maximum value of the frequency values adopted by the CPU working frequency and the maximum value of the CPU working frequency when the electronic equipment is in a normal state without performance evaluation is larger than a preset first threshold value;

In one embodiment of the invention, where the target performance parameters include GPU operating frequency:

the at least one target parameter value of the GPU operating frequency includes a maximum value of the GPU operating frequency in the performance evaluation process of the electronic device, that is, a maximum value adopted by the GPU operating frequency in the performance evaluation process of the electronic device, and specifically may be a maximum value of the obtained target parameter values.

The at least one reference parameter value of the GPU operating frequency includes a maximum value of the GPU operating frequency when the electronic device is in a normal state without performance evaluation, that is, a maximum value adopted by the GPU operating frequency in a daily operating state of the electronic device, and may specifically be a maximum value of the acquired reference parameter values.

The determination condition corresponding to the GPU operating frequency may be: in the performance evaluation process of the electronic equipment, the difference value between the maximum value of the GPU working frequency and the maximum value of the CPU working frequency when the electronic equipment is in a normal state without performance evaluation is larger than a preset second threshold value; the second threshold value can be determined by those skilled in the art according to the actual situation, and for example, the second threshold value can be 1%.

The working frequency of the GPU is similar to that of the CPU, and under the normal condition, the higher the working frequency of the GPU is, the better the test result is, so that when the performance of the electronic equipment is evaluated, the working frequency of the GPU can be modified maliciously, and the aim of obtaining a good evaluation result by cheating is fulfilled. Therefore, based on the above-mentioned decision conditions, it can be determined whether there is a malicious behavior in the evaluation process.

the at least one target parameter value of the GPU working frequency comprises a constant value which is always kept by the GPU working frequency in the performance evaluation process of the electronic equipment, namely, the GPU working frequency is always kept stable in the performance evaluation process of the electronic equipment, and the obtained multiple target parameter values are the same.

the determination condition corresponding to the GPU operating frequency may also be: and in the performance evaluation process of the electronic equipment, the constant value of the GPU working frequency which is always kept is the same as the maximum value of the GPU working frequency when the electronic equipment is in a normal state without performance evaluation.

It is easy to understand that, in the daily use process of the electronic device, the CPU operating frequency may change due to different use states of users. And because the GPU working frequency is always kept at the maximum value of the daily state in the evaluation process, the malicious behavior of modifying the CPU working frequency in the evaluation process can also be determined.

the determination condition corresponding to the GPU operating frequency may also be: at least one target parameter value and at least one reference parameter value of the GPU operating frequency meet at least one of a third judgment condition and a fourth judgment condition, wherein the third judgment condition is that: in the performance evaluation process of the electronic equipment, the difference value between the maximum value of the frequency values adopted by the GPU working frequency and the maximum value of the CPU working frequency when the electronic equipment is in a normal state without performance evaluation is larger than a preset second threshold value;

In one embodiment of the invention, where the target performance parameter comprises a device temperature:

the determination condition corresponding to the device temperature may be: and the difference value between the maximum value of the equipment temperature in the performance evaluation process of the electronic equipment and the maximum value of the equipment temperature when the electronic equipment is in a normal state without performance evaluation is larger than a preset third threshold value. The third threshold value can be determined by those skilled in the art according to actual situations, and for example, the third threshold value can be 10.

The higher the temperature of the equipment is, the equipment is in a high-efficiency running state, which may be caused by adjusting various performance indexes to the best state in order to obtain a good evaluation result, so that malicious behaviors for modifying various performance indexes in the evaluation process can be determined through the judgment conditions.

In one embodiment of the invention, where the target performance parameter comprises power consumption per unit time:

the determination condition corresponding to the power consumption per unit time may be: and in the performance evaluation process of the electronic equipment, the difference value between the maximum value of the power consumption per unit time and the maximum value of the power consumption per unit time when the electronic equipment is in a normal state without performance evaluation is larger than a preset fourth threshold value. The fourth threshold value can be determined by those skilled in the art according to actual situations, and for example, the fourth threshold value can be 10%.

Similar to the device temperature, if the power consumption per unit time is high, it may be caused by adjusting various performance indexes to the best state in order to obtain a good evaluation result, and therefore, it may be determined that there is a malicious behavior of modifying various performance indexes in the evaluation process through the above-mentioned determination condition.

In one embodiment of the invention, where the target performance parameter comprises a CPU core turn-on number:

the determination conditions corresponding to the CPU core turn-on number may be: in the performance evaluation process of the electronic equipment, the actual starting number of the CPU cores is larger than that of the CPU cores when the electronic equipment is in a normal state without performance evaluation.

For example, the electronic device is a 4-core CPU, and only 1-2 cores are started in a daily state, but the CPU starts all 4 cores in the performance evaluation process, which is obviously different from the daily state, so that it can be determined that a malicious behavior exists in the evaluation process by modifying the number of the started CPU cores to obtain a good evaluation result through the determination conditions.

It will be understood that when there is only one target parameter value and one reference parameter value, the maximum value of said at least one target parameter value is referred to as the target parameter value and the maximum value of said at least one reference parameter value is referred to as the reference parameter value.

It can be understood that the more the number of the obtained target parameter values and the reference parameter values is, the higher the accuracy of judging whether the electronic device has the malicious behavior by using the judgment condition is.

It should be noted that the above-mentioned scheme may be executed by a functional software providing a method for determining whether malicious behavior exists in the electronic device, and the functional software may be a separate software in the electronic device or a plug-in of a related application software, which is reasonable.

The electronic device may be in the form of a PC, a notebook computer, a mobile terminal, a tablet computer, etc., and the electronic device may be in any form of electronic device.

The method and the device determine whether the malicious behavior exists in the performance evaluation process of the electronic equipment by obtaining at least one target parameter value of the target performance parameter in the performance evaluation process of the electronic equipment and at least one reference parameter value of the target performance parameter when the electronic equipment is in a normal state without performance evaluation, and further can judge whether the evaluation result of the performance evaluation of the electronic equipment is real and reliable, and have good universality and strong practicability.

Further, the at least one reference parameter value of the target performance parameter, which is pre-stored when the electronic device is in a normal state without performance evaluation, may be obtained locally, where the at least one reference parameter value of the target performance parameter is pre-stored when the electronic device is in a normal state without performance evaluation;

it will be appreciated that when this is done, the parameter reference values are obtained more quickly.

Of course, at least one reference parameter value of the target performance parameter may also be obtained from the server, where the reference parameter value is stored in advance and is in a normal state where the performance of the electronic device is not evaluated.

When the method is adopted, the recorded reference parameter value of the target performance parameter of the electronic equipment in a normal state without performance evaluation is uploaded to the server, and the server can obtain the reference parameter value corresponding to the target performance parameter of the equipment based on the model of the equipment by statistically analyzing a large amount of data uploaded by the equipment with the same model. When whether malicious behaviors exist in the electronic equipment is determined, the maximum value of the reference parameter value corresponding to the target performance parameter is obtained from the server, and then corresponding subsequent steps are carried out. Therefore, whether malicious behaviors exist in the equipment can be judged more accurately, and meanwhile, the local storage space can be saved.

Corresponding to the above method embodiment, an embodiment of the present invention further provides an apparatus for determining whether a malicious behavior exists in a performance evaluation process of an electronic device, as shown in fig. 4, where the apparatus includes:

a target parameter value obtaining module 201, configured to obtain at least one target parameter value of a target performance parameter of an electronic device in a performance evaluation process of the electronic device;

a reference parameter value obtaining module 202, configured to obtain at least one reference parameter value of the target performance parameter, where the reference parameter value is stored in advance, and the electronic device is in a normal state where performance evaluation is not performed;

the malicious behavior determination module 203 is configured to determine whether a malicious behavior exists in the performance evaluation process of the electronic device according to the at least one target parameter value and the at least one reference parameter value of the target performance parameter.

After the target parameter value obtaining module 201 and the reference parameter value obtaining module 202 obtain the target parameter value and the reference parameter value, the malicious behavior determining module 203 may determine whether a malicious behavior exists in the performance evaluation process of the electronic device according to the target parameter value and the reference parameter value, and further may determine whether the evaluation result of the performance evaluation of the electronic device is real and reliable, and has good versatility and strong practicability.

In a specific implementation process, the malicious behavior determining module 203 includes a first malicious behavior determining unit, configured to determine whether the at least one target parameter value and the at least one reference parameter value of the target performance parameter meet a predetermined determination condition corresponding to the target performance parameter, and if so, determine that a malicious behavior exists in a performance evaluation process of the electronic device; otherwise, determining that no malicious behavior exists in the performance evaluation process of the electronic equipment.

Wherein the target performance parameters include: one of CPU working frequency, GPU working frequency, equipment temperature, unit time power consumption and CPU core opening number.

In another specific implementation process, the malicious behavior determining module 203 includes a second malicious behavior determining unit, configured to determine whether at least one target parameter value and at least one reference parameter value of a target performance parameter to be determined meet a determination condition corresponding to the preset target performance parameter to be determined, and if so, determine that a malicious behavior exists in a performance evaluation process of the electronic device;

Wherein the target performance parameters include: at least one of CPU operating frequency, GPU operating frequency, equipment temperature, power consumption per unit time and CPU core turn-on number.

In both embodiments described above, where the target performance parameter comprises the CPU operating frequency,

Or,

in the case where the at least one reference parameter value of the CPU operating frequency includes a maximum value of the CPU operating frequency when the electronic device is in a normal state without performance evaluation,

the determination conditions corresponding to the CPU operating frequency may also be: and in the performance evaluation process of the electronic equipment, the constant value of the CPU working frequency always kept is the same as the maximum value of the CPU working frequency when the electronic equipment is in a normal state without performance evaluation.

It is easy to understand that, in the daily use process of the electronic device, the CPU operating frequency may change due to different use states of users.

the determination conditions corresponding to the CPU operating frequency may also be: at least one target parameter value and at least one reference parameter value of the CPU working frequency meet at least one of a first judgment condition and a second judgment condition, wherein the first judgment condition is that: in the performance evaluation process of the electronic equipment, the difference value between the maximum value of the frequency values adopted by the CPU working frequency and the maximum value of the CPU working frequency when the electronic equipment is in a normal state without performance evaluation is larger than a preset first threshold value;

In the case where the target performance parameters include GPU operating frequency,

Or,

in the case where the at least one reference parameter value for the GPU operating frequency comprises a maximum value for the GPU operating frequency when the electronic device is in a normal state without performance evaluation,

Under the condition that the target performance parameters comprise equipment temperature, at least one target parameter value of the equipment temperature comprises the maximum value of the equipment temperature in the performance evaluation process of the electronic equipment;

Under the condition that the target performance parameters comprise the power consumption per unit time, at least one target parameter value of the power consumption per unit time comprises the maximum value of the power consumption per unit time in the performance evaluation process of the electronic equipment;

Under the condition that the target performance parameters comprise the CPU core opening number, at least one target parameter value of the CPU core opening number comprises the actual CPU core opening number in the performance evaluation process of the electronic equipment;

Further, the reference parameter value obtaining module 202 may include: a first reference parameter value obtaining unit, configured to locally obtain at least one reference parameter value of the target performance parameter, where the reference parameter value is pre-stored and is in a normal state where performance evaluation is not performed on the electronic device;

or

It is noted that, herein, relational terms such as first and second, and the like may be used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Also, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising an … …" does not exclude the presence of other identical elements in a process, method, article, or apparatus that comprises the element.

All the embodiments in the present specification are described in a related manner, and the same and similar parts among the embodiments may be referred to each other, and each embodiment focuses on the differences from the other embodiments. In particular, as for the apparatus embodiment, since it is substantially similar to the method embodiment, the description is relatively simple, and for the relevant points, reference may be made to the partial description of the method embodiment.

Those skilled in the art will appreciate that all or part of the steps in the above method embodiments may be implemented by a program to instruct relevant hardware to perform the steps, and the program may be stored in a computer-readable storage medium, which is referred to herein as a storage medium, such as: ROM/RAM, magnetic disk, optical disk, etc.

The above description is only for the preferred embodiment of the present invention, and is not intended to limit the scope of the present invention. Any modification, equivalent replacement, or improvement made within the spirit and principle of the present invention shall fall within the protection scope of the present invention.

Claims

1. The method for determining whether the malicious behavior exists in the performance evaluation process of the electronic equipment is characterized by comprising the following steps of:

2. The method according to claim 1, wherein the determining whether malicious behavior exists in the performance evaluation process of the electronic device according to the at least one target parameter value and the at least one reference parameter value of the target performance parameter comprises:

3. The method according to claim 1, wherein the determining whether malicious behavior exists in the performance evaluation process of the electronic device according to the at least one target parameter value and the at least one reference parameter value of the target performance parameter comprises:

4. A method according to claim 2 or 3, wherein the target performance parameters comprise: at least one of CPU operating frequency, GPU operating frequency, device temperature, and power consumption per unit time.

5. The method of claim 4,

or,

6. The method of claim 4, wherein in the event that the target performance parameter comprises a CPU operating frequency:

7. The method of claim 4, wherein, where the target performance parameter comprises a GPU operating frequency:

8. The method of claim 1, wherein the target performance parameters include a CPU core turn-on number;

9. The method of claim 1, wherein the obtaining at least one pre-stored reference parameter value for the target performance parameter when the electronic device is in a normal state without performance evaluation comprises:

or

10. The device for determining whether the malicious behavior exists in the performance evaluation process of the electronic equipment is characterized by comprising the following steps of:

11. The apparatus of claim 10, wherein the malicious behavior determination module comprises:

12. The apparatus of claim 10, wherein the malicious behavior determination module comprises:

13. The apparatus of claim 11 or 12, wherein the target performance parameters comprise: at least one of CPU operating frequency, GPU operating frequency, device temperature, and power consumption per unit time.

14. The apparatus of claim 13,

or,

15. The apparatus of claim 13, wherein in the case that the target performance parameter comprises a CPU operating frequency:

16. The apparatus of claim 13, wherein, where the target performance parameter comprises a GPU operating frequency:

17. The apparatus of claim 10, wherein the target performance parameter comprises a CPU core turn-on number;

18. The apparatus of claim 10, wherein the reference parameter value obtaining module comprises:

or