CN107096220A - A kind of plug-in detection of client and the system and method sealed and stopped automatically - Google Patents
A kind of plug-in detection of client and the system and method sealed and stopped automatically Download PDFInfo
- Publication number
- CN107096220A CN107096220A CN201710364541.6A CN201710364541A CN107096220A CN 107096220 A CN107096220 A CN 107096220A CN 201710364541 A CN201710364541 A CN 201710364541A CN 107096220 A CN107096220 A CN 107096220A
- Authority
- CN
- China
- Prior art keywords
- client
- data
- plug
- game
- analysis
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Classifications
-
- A—HUMAN NECESSITIES
- A63—SPORTS; GAMES; AMUSEMENTS
- A63F—CARD, BOARD, OR ROULETTE GAMES; INDOOR GAMES USING SMALL MOVING PLAYING BODIES; VIDEO GAMES; GAMES NOT OTHERWISE PROVIDED FOR
- A63F13/00—Video games, i.e. games using an electronically generated display having two or more dimensions
- A63F13/30—Interconnection arrangements between game servers and game devices; Interconnection arrangements between game devices; Interconnection arrangements between game servers
- A63F13/35—Details of game servers
-
- A—HUMAN NECESSITIES
- A63—SPORTS; GAMES; AMUSEMENTS
- A63F—CARD, BOARD, OR ROULETTE GAMES; INDOOR GAMES USING SMALL MOVING PLAYING BODIES; VIDEO GAMES; GAMES NOT OTHERWISE PROVIDED FOR
- A63F13/00—Video games, i.e. games using an electronically generated display having two or more dimensions
- A63F13/60—Generating or modifying game content before or while executing the game program, e.g. authoring tools specially adapted for game development or game-integrated level editor
-
- A—HUMAN NECESSITIES
- A63—SPORTS; GAMES; AMUSEMENTS
- A63F—CARD, BOARD, OR ROULETTE GAMES; INDOOR GAMES USING SMALL MOVING PLAYING BODIES; VIDEO GAMES; GAMES NOT OTHERWISE PROVIDED FOR
- A63F13/00—Video games, i.e. games using an electronically generated display having two or more dimensions
- A63F13/70—Game security or game management aspects
- A63F13/71—Game security or game management aspects using secure communication between game devices and game servers, e.g. by encrypting game data or authenticating players
-
- A—HUMAN NECESSITIES
- A63—SPORTS; GAMES; AMUSEMENTS
- A63F—CARD, BOARD, OR ROULETTE GAMES; INDOOR GAMES USING SMALL MOVING PLAYING BODIES; VIDEO GAMES; GAMES NOT OTHERWISE PROVIDED FOR
- A63F13/00—Video games, i.e. games using an electronically generated display having two or more dimensions
- A63F13/80—Special adaptations for executing a specific game genre or game mode
- A63F13/822—Strategy games; Role-playing games
Landscapes
- Engineering & Computer Science (AREA)
- Multimedia (AREA)
- Business, Economics & Management (AREA)
- Computer Security & Cryptography (AREA)
- General Business, Economics & Management (AREA)
- Management, Administration, Business Operations System, And Electronic Commerce (AREA)
Abstract
The present invention includes a kind of plug-in detection of client and the system and method sealed and stopped automatically, for completing：Collection client data is uploaded；Correspondence game data and plug-in data are stored；Analysis receives whether client data possesses plug-in feature；Had according to client data for plug-in number of features, corresponding processing is carried out to game client.Beneficial effects of the present invention are：Technical antagonism need not be done with plug-in, substantially reduce technical costs；Facilitate adjustment algorithm and judge index using big data analytical technology, improve plug-in judgment accuracy；All processing are all completed in service end, convenient that plug-in processing is adjusted at any time, it is not necessary to which that client updates；Realize that data, with game real-time, interactive, handle role in real time；Using a variety of processing modes, purely it is not to seal and stop to cause player irremediable injury, causes player to be lost in.Player is allowed to feel using plug-in lose more than gain actively without using plug-in；Plug-in judgement data are improved, accuracy is improved.
Description
Technical field
The present invention relates to a kind of plug-in detection of client and the system and method sealed and stopped automatically, belong to network information security neck
Domain.
Background technology
With the continuous popularization of internet and flourishing for online game, online game is increasingly becoming people's entertainment life
A part, but plug-in heavy damage game balance of playing, plug-in user can be fast in a short time by the form of cheating
Speed obtains the game income that general user can just obtain by the normal game time, and this greatly compromises all normal users
The interests and fairness of game.
Plug-in is the problem that all game can not be evaded.Especially computer client is played, popular in the market
Game the problem of have plug-in.Due to the driving of interests, plug-in technical capability is made more and more stronger.The technology of confrontation, into
This also can more and more higher.It may be said that can not prevent plug-in.
Plug-in is all Tough questions played and faced, plug-in classification of playing：Game is plug-in can be divided into by implementation
Off line formula and internal hanging type.
Off line formula refers to completely disengage from game client program, the plug-in program that can be freely communicated with game server.
Development difficulty is maximum, and common more than 100 open, and the harm to game is maximum, heavy damage Game Market, influences player normally to swim
Play, shortening game operation cycle normal development process:Solve anti-debug safeguard measure；Analysis game start-up parameter；Conversed analysis
Go out enciphering and deciphering algorithm of playing；Conversed analysis goes out the resource informations such as map；Analysis logs in package, realizes that off line logs in and obtained role
Attribute, equipment, article, technical ability relevant information；Concrete function package is analyzed；Pathfinding algorithm is integrated, basic on-hook is realized；According to work
Make room demand, consummating function.
Internal hanging type is, using game client program as carrier, to complete logical with game server by client-side program
News.
Shown in following (1)~(6) of the plug-in method of detection popular at present：
(1) crucial api Hook are protected, carries out sending and receiving for network correlation；
(2) dynamic link library injection detection is probably on hook loading storehouse, it is also possible to timing detection procedure module；
(3) for carrying out debugging client with OD instruments, it appears that all without thoroughly method, general is exactly to add a little flowers to refer to
Order, shell adding does a little interference, but this is also enough to block the inadequate author of most of level；
(4) many game all can be to PE systems, OD instruments, QMacro, and simple trip etc. is detected, mainly enumerates window
Mouth name, process name；
(5) the plug-in detection of button class, is mainly performed with acquisition cursor and acquisition window class for background script, examined
Survey the window's position and whether mouse position is correct, also some are that WM_ACTIVE message is handled；
(6) multiplicity of detection mouse click location is said for some people, this is themselves guess mostly, so
Easily cause misplacement.
Shown in following (1)~(8) of anti-plug-in means popular at present：
(1) off line is hung and interior extension exploitation must solve game anti-debug protection first, and current mainstream thoughts are driving layers
Carry out debugger process detection, flag bit detection, the method such as HOOK important functions and perform file to game and add violent shell to utilize
The function of shell realizes anti-adjust；
(2) start-up parameter to game is encrypted, and start-up parameter encryption is the place for being easier to ignore, encryption function
Middle to count etc to obtain and become ginseng using obtaining moment, whether flexible Application registration table or file operation judge to play from official's journey
Sequence starts, then to correlative code section VMP；
(3) detect and prevent opening more, i.e., open multiple client simultaneously；
(4) code integrity is verified, using complete effect of the CRC algorithm to the complete effect hooking function of itself, some
Important code segment is individually verified in addition, verification correlative code section VMP, is if necessary returned in server and is verified；
(5) the related package of game entry is handled；
(6) hostility process, module scans；
(7) client loses response；
(8) picture answer mechanism.
Current plug-in countermeasure is generally：Arithmetic analysis, self-built picture library and artificial answer.Prior art master is to be processed
Mode is：Encrypt (shell adding), detection, confrontation.It was found that No starting after plug-in, forbids logging in, fills out identifying code etc..
The major defect of these technologies has：Technical costs is high, under the driving of interests, and developing plug-in technology can be increasingly
By force, anti-plug-in technical costs also can constantly rise；Technology is anti-plug-in main in client completion, and client-side program is plug-in
Developer can control completely, resist very difficult；The anti-necessary updating client of plug-in function upgrading, reaction time, length (could not
Can update at any time), renewal influences whether all players；Influence face is big, and cost is high.
Prior art is typically all that client does detection judgement, processing in real time.Because client is controlled by plug-in person is developed,
Exploitation is plug-in can to test plug-in effect immediately, so make plug-in debugging efficiency high.
The content of the invention
In order to overcome the shortcomings of existing anti-external hanging of online game technology, it is an object of the invention to：A kind of client is provided
Plug-in detection and the system and method sealed and stopped automatically are held, detection data are collected by client, analyzed in service end with big data
Method come comprehensive analysis client detection data and player behavioral data, according to analysis result to use plug-in player
Flexibly disposed, thus avoid with plug-in developer's progress technology contest, technical antagonism cost can be substantially reduced, due to
Can be at any time in service end adjustment algorithm, index, threshold value, it is not necessary to update client can greatly improve anti-plug-in efficiency
And reduce cost.
Technical scheme includes a kind of plug-in detection of client and the system sealed and stopped automatically, including client, number
According to collection module, data memory module, data analysis module, data feedback module and server, it is characterised in that：Data acquisition
Module, for providing data interaction interface, sets up the thread for gathering client-side information, using above-mentioned thread to number clients
According to being acquired, and the client data collected is uploaded onto the server；Data memory module, sends to clothes for receiving
The client data of business device, setting up database is used to store client correspondence game data, and, store for trip
Play the plug-in plug-in judgement data analyzed, game data therein includes game role information and game behavioral data；Number
According to analysis module, for receiving client data using big data analysis and being analyzed with plug-in judgement data, analyze
Whether client data possesses plug-in feature, and analysis result is sent to data feedback module；Data feedback module, for connecing
Data results are received, is had according to client data for plug-in number of features, corresponding place is carried out to game client
Reason.
According to the described plug-in detection of client and the system sealed and stopped automatically, wherein data acquisition module includes：Interface
Module for sending client data, and provides interface editor module there is provided the interface for creating, connecting, send and receiving, and uses
Editor is extended in docking port；Game data gathers submodule, sets up and is connected with game main thread, for receiving game client
The data message of the client process correlation of the game main thread monitoring collection at end, the related data message of the client process
Including but not limited to game client loading starts the dynamic base that can be loaded, dynamic library name, dynamic base complete trails and game client
Parent process information is called in end startup；PC data-acquisition submodules, it is described for gathering the data message unrelated with client process
The information unrelated with client process includes but not limited the application program, application name, installation that player PC is currently running
Catalogue complete trails, player PC opening window, window name, window title name.
According to the described plug-in detection of client and the system sealed and stopped automatically, described data memory module includes：Data
Receiving submodule, the client data of server is sent to for receiving, and receives the newest plug-in spy updated by external data
Reference ceases, and the external data includes but is not limited to player's report and the data manually obtained；Data keep in submodule, keep in number
According to the client data of acquisition module, if there is the plug-in feature of uniqueness after being analyzed through data analysis module, addition this feature is arrived
Database；
Database purchase submodule, foundation include existing multiple game role relevant informations, game behavioral data and outside
Hang the database for judging data, it is possible to real-time update.
According to the described plug-in detection of client and the system sealed and stopped automatically, described data analysis module includes：Operation
Item analysis submodule, the executable program file of analysis client operation, including but not limited to file name feature, if start
The parent process of game；Add-in analyzes submodule, and it is explanatory that the dynamic link library and client that analysis client is loaded are loaded
Compilation script, including but not limited to file name, script name, path, unofficial dynamic link library and unofficial script；Numeral
Analyze submodule, comparative analysis client core dynamic link library file MD5 values, official's dynamic link of player's client loading
Whether the MD5 values in storehouse are consistent with official and analyze the quantity of documents of client loading；Submodule is marked, according to different uses
Plug-in situation using plug-in player to carrying out mark of different nature.
According to the described plug-in detection of client and the system sealed and stopped automatically, the data feedback module includes：Receive institute
The analysis result of analysis module is stated, sending different processing to client according to different labels asks, further, the client
The processing gone out to processing request correspondence is held, processing therein includes client GID being alerted and sealed and stopped processing.
Technical scheme also includes a kind of plug-in detection of client and the method sealed and stopped automatically, it is characterised in that
This method includes：Data interaction interface is provided, the thread for gathering client-side information is set up, using above-mentioned thread to client
Data are acquired, and the client data collected is uploaded onto the server；Receive and send to the number clients of server
According to, setting up database is used to store client correspondence game data, and, store for plug-in analyze of playing
Plug-in judgement data, game data therein include game role information and game behavioral data；Connect using big data analysis
Receive client data and be analyzed with plug-in judgement data, whether analysis client data possesses plug-in feature, and will
Analysis result is sent to data feedback module；Data results are received, are had according to client data for plug-in feature
Number, corresponding processing is carried out to game client.
In a preferred embodiment, this method also includes：The interface for creating, connecting, send and receiving, hair are provided
Client data is sent, and interface editor module is provided, editor is extended for docking port；Set up and be connected with game main thread,
Receive the related data message of the client process of the game main thread monitoring collection of game client, the client process phase
The data message of pass includes but is not limited to dynamic base, dynamic library name, the dynamic base system-wide that game client loading startup can be loaded
Footpath and game client, which start, calls parent process information；The collection data message unrelated with client process, described and client
The catalogue that the unrelated information of process includes but do not limit the application program that player PC is currently running, application name, install is complete
Window that path, player PC are being opened, window name, window title name.
In a preferred embodiment, this method also includes：The client data for being sent to server is received, is received
The newest plug-in characteristic information updated by external data, the external data includes but is not limited to player's report and artificial acquisition
Data；The client data of temporal data acquisition module, if there is the plug-in feature of uniqueness after being analyzed through data analysis module,
This feature is added to database；Foundation includes existing multiple game role relevant informations, game behavioral data and plug-in judgement
The database of data, it is possible to real-time update.
In a preferred embodiment, this method also includes：Item analysis submodule is run, analysis client operation
Executable program file, including but not limited to file name feature, if start the parent process of game；Add-in analyzes submodule
Block, the including but not limited to dynamic link library and the interpretive compiling script of client loading of analysis client loading, filename
Title, script name, path, unofficial dynamic link library and unofficial script；Numerical analysis submodule, comparative analysis client core
Heart dynamic link library file MD5 values, player's client loading official's dynamic link library MD5 values whether with official unanimously and
Analyze the quantity of documents of client loading；Submodule is marked, according to the different plug-in situations of use to entering using plug-in player
Row mark of different nature.
In a preferred embodiment, this method also includes：The analysis result of the analysis module is received, according to not
With label different processing sent to client asked, further, the processing that the client goes out to processing request correspondence, its
In processing include client GID is alerted and sealed and stopped processing.
Beneficial effects of the present invention are：
1. technical antagonism need not be done with plug-in, technical costs is substantially reduced；
2. facilitating adjustment algorithm and judge index using big data analytical technology, plug-in judgment accuracy is improved；
3. all processing are all completed in service end, convenient that plug-in processing is adjusted at any time, it is not necessary to which that client updates；
4. using middle key technology, realize that data, with game real-time, interactive, handle role in real time；
5. using a variety of processing modes, purely it is not to seal and stop to cause player irremediable injury, causes player to be lost in.
Player is allowed to feel using plug-in lose more than gain actively without using plug-in；
6. utilizing external data, the data manually obtained improve plug-in judgement data, improve accuracy.
Brief description of the drawings
Fig. 1 show the overall construction drawing according to embodiment of the present invention；
Fig. 2 is shown seals and stops flow chart according to embodiment of the present invention；
Fig. 3 show the data acquisition flow figure according to embodiment of the present invention.
Embodiment
In order that the object, technical solutions and advantages of the present invention are clearer, below in conjunction with the accompanying drawings with specific embodiment pair
The present invention is described in detail.The plug-in detection of client of the present invention and the system and method sealed and stopped automatically are applied to game and runed
When to plug-in carry out automatic detection and sealing and stopping processing.
Fig. 1 show the overall construction drawing according to embodiment of the present invention.
The plug-in detection of client of the present invention includes client, data collection module, data with the system sealed and stopped automatically and deposited
Store up module, data analysis module, data feedback module and server, it is characterised in that：Data acquisition module, for providing data
Interactive interface, sets up the thread for gathering client-side information, and client data is acquired using above-mentioned thread, and by institute
The client data collected is uploaded onto the server；Data memory module, sends to the client data of server for receiving,
Setting up database is used to store client correspondence game data, and, store for being analyzed to game is plug-in
Plug-in judgement data, game data therein includes game role information and game behavioral data；Data analysis module, for making
Client data is received with big data analysis and is analyzed with plug-in judgement data, and whether analysis client data possesses
Plug-in feature, and analysis result is sent to data feedback module；Data feedback module, for receiving data results, root
Have according to client data for plug-in number of features, corresponding processing is carried out to game client.
Fig. 2 is shown seals and stops flow chart according to embodiment of the present invention.It mainly includes the collection of data, point of data
Analyse and seal and stop processing.
Wherein the collection of data includes collection client data successively, and the client data collected is uploaded into service
Device, and, obtain the corresponding game role behavioral data of client and external data；
Wherein the analysis of data is contrasted including the use of big data to the data collected with existing plug-in data, is obtained
To corresponding analysis result, existing plug-in data can be updated in real time；
The processing wherein sealed and stopped includes being performed according to contrast knot seals and stops processing accordingly.
Data, and the related information of association game role, and game behavioral data are collected by client, carried out comprehensive
Close analysis.Determine plug-in.
Client, which collects data analysis, to be had：
1. the application file of client operation：File name feature, if be the parent process for starting game
2. the dynamic base of client loading：File name, path, unofficial dynamic base
3. the lua scripts of client loading：Script name, path, unofficial script
4. client core dynamic library file MD5 values, whether the MD5 values of official's dynamic base of player's client loading are with official
Side is consistent
5. the quantity of documents of client loading
By data analysis, to carrying out label of different nature using plug-in player.Different labels carries out different
Processing.It is such as large-scale, the destruction game resource that batch is logged in, forever sealed and stopped.The activity influence that attends a game is opened for more
Other players', player's carry out activity is participated in limit.Technical ability is discharged for automatic high-frequency, technical ability failure is carried out to player
Processing.
Fig. 3 show the data acquisition flow figure according to embodiment of the present invention.Including
(1) it is associated with client process, the unique file and game client for such as collecting game client loading add
The dynamic base of load；
(2) and client process it is unrelated, other window progress informations being currently running such as terminal.
Game client can hold the thread of a collection information after starting, for collecting information and uploading information.
Some related to client is that game main thread oneself is monitored collection, and another part is to collect line
Range monitoring is collected.
It is as follows that information collects content：
The application program that player's computer is currently running, application name, the catalogue complete trails of installation；
The window that player's computer is being opened, window name, window title name；
Game client starts the dynamic base that can be loaded, dynamic library name, the complete trails of dynamic base；
Game client, which starts, calls parent process information.
Engine modules add load document statistics：File is read using unified interface；There is reading to pack when taking file
File and reading unique file, when unique file file is read, can save filename and comspec.
It is described above, simply presently preferred embodiments of the present invention, the invention is not limited in above-mentioned embodiment, as long as
It reaches the technique effect of the present invention with identical means, should all belong to protection scope of the present invention.In the protection model of the present invention
Its technical scheme and/or embodiment can have a variety of modifications and variations in enclosing.
Claims (10)
1. a kind of plug-in detection of client and the system sealed and stopped automatically, including client, data collection module, data storage mould
Block, data analysis module, data feedback module and server, it is characterised in that：
Data acquisition module, for providing data interaction interface, sets up the thread for gathering client-side information, uses above-mentioned line
Journey is acquired to client data, and the client data collected is uploaded onto the server；
Data memory module, sends to the client data of server for receiving, and setting up database is used for client correspondence
Game data is stored, and, store for the plug-in plug-in judgement data analyzed, game data therein of playing
Including game role information and game behavioral data；
Data analysis module, for receiving client data using big data analysis and being carried out with plug-in judgement data to score
Whether analysis, analysis client data possesses plug-in feature, and analysis result is sent to data feedback module；
Data feedback module, for receiving data results, has for plug-in number of features according to client data, right
Game client carries out corresponding processing.
2. the plug-in detection of client according to claim 1 and the system sealed and stopped automatically, it is characterised in that described data
Acquisition module includes：
Interface sub-module for sending client data, and provides interface volume there is provided the interface for creating, connecting, send and receiving
Module is collected, editor is extended for docking port；
Game data gathers submodule, sets up and is connected with game main thread, and the game main thread for receiving game client is supervised
The related data message of the client process of collection is controlled, the related data message of the client process includes but is not limited to game
Client loading starts the dynamic base that can be loaded, dynamic library name, dynamic base complete trails and game client startup and calls parent process
Information；
PC data-acquisition submodules, it is described unrelated with client process for gathering the data message unrelated with client process
Information include but do not limit the application program, application name, the catalogue complete trails installed, player that player PC is currently running
Window that PC is being opened, window name, window title name.
3. the plug-in detection of client according to claim 1 and the system sealed and stopped automatically, it is characterised in that described data
Memory module includes：
Data receiver submodule, the client data of server is sent to for receiving, and reception is updated most by external data
New plug-in characteristic information, the external data includes but is not limited to player's report and the data manually obtained；
Data keep in submodule, the client data of temporal data acquisition module, if there is uniqueness after being analyzed through data analysis module
Plug-in feature, then add this feature to database；
Database purchase submodule, foundation includes existing multiple game role relevant informations, plays and behavioral data and plug-in sentences
The database of disconnected data, it is possible to real-time update.
4. the plug-in detection of client according to claim 1 and the system sealed and stopped automatically, it is characterised in that described data
Analysis module includes：
Item analysis submodule is run, the executable program file of client operation, including but not limited to file name feature is analyzed,
Whether startup game parent process；
Add-in analyzes submodule, the dynamic link library of analysis client loading and the interpretive compiling script of client loading,
Including but not limited to file name, script name, path, unofficial dynamic link library and unofficial script；
Numerical analysis submodule, comparative analysis client core dynamic link library file MD5 values, the official of player's client loading
Whether the MD5 values of dynamic link library are consistent with official and analyze the quantity of documents of client loading；
Submodule is marked, according to the different plug-in situations of use to carrying out mark of different nature using plug-in player.
5. the plug-in detection of client according to claim 1 and the system sealed and stopped automatically, it is characterised in that the data are anti-
Feedback module includes：
The analysis result of the analysis module is received, sending different processing to client according to different labels asks, and enters one
Step, the client to processing request correspondence go out processing, processing therein include client GID is alerted and
Seal and stop processing.
6. a kind of plug-in detection of client and the method sealed and stopped automatically, it is characterised in that this method includes：
Data interaction interface is provided, the thread for gathering client-side information is set up, client data is entered using above-mentioned thread
Row collection, and the client data collected is uploaded onto the server；
Receive and send to the client data of server, setting up database is used to store client correspondence game data,
And, store for the plug-in plug-in judgement data analyzed of playing, game data therein to include game role information
With game behavioral data；
Client data is received using big data analysis and is analyzed with plug-in judgement data, and analysis client data is
It is no to possess plug-in feature, and analysis result is sent to data feedback module；
Data results are received, are had according to client data for plug-in number of features, to game client progress pair
The processing answered.
7. the plug-in detection of client according to claim 6 and the method sealed and stopped automatically, it is characterised in that this method is also wrapped
Include：
The interface for creating, connecting, send and receiving is provided, client data is sent, and interface editor module is provided, for docking
Mouth is extended editor；
Set up and be connected with game main thread, receive the client process correlation of the game main thread monitoring collection of game client
Data message, the related data message of the client process includes but is not limited to game client loading starting can load dynamic
State storehouse, dynamic library name, dynamic base complete trails and game client, which start, calls parent process information；
The collection data message unrelated with client process, the information unrelated with client process includes but does not limit player PC
Window, window that the application program that is currently running, application name, the catalogue complete trails installed, player PC are being opened
Name, window title name.
8. the plug-in detection of client according to claim 6 and the method sealed and stopped automatically, it is characterised in that this method bag
Include：
The client data for being sent to server is received, the newest plug-in characteristic information updated by external data is received, it is described
External data includes but is not limited to player's report and the data manually obtained；
The client data of temporal data acquisition module, if there is the plug-in feature of uniqueness after being analyzed through data analysis module, adds
Plus this feature is to database；
Setting up includes the database of existing multiple game role relevant informations, game behavioral data and plug-in judgement data, and
Can be with real-time update.
9. the plug-in detection of client according to claim 6 and the method sealed and stopped automatically, it is characterised in that this method is also wrapped
Include：
Item analysis submodule is run, the executable program file of client operation, including but not limited to file name feature is analyzed,
Whether startup game parent process；
Add-in analyzes submodule, the dynamic link library of analysis client loading and the interpretive compiling script of client loading,
Including but not limited to file name, script name, path, unofficial dynamic link library and unofficial script；
Numerical analysis submodule, comparative analysis client core dynamic link library file MD5 values, the official of player's client loading
Whether the MD5 values of dynamic link library are consistent with official and analyze the quantity of documents of client loading；
Submodule is marked, according to the different plug-in situations of use to carrying out mark of different nature using plug-in player.
10. the plug-in detection of client according to claim 6 and the method sealed and stopped automatically, it is characterised in that this method is also
Including：
The analysis result of the analysis module is received, sending different processing to client according to different labels asks, and enters one
Step, the client to processing request correspondence go out processing, processing therein include client GID is alerted and
Seal and stop processing.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201710364541.6A CN107096220A (en) | 2017-05-22 | 2017-05-22 | A kind of plug-in detection of client and the system and method sealed and stopped automatically |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201710364541.6A CN107096220A (en) | 2017-05-22 | 2017-05-22 | A kind of plug-in detection of client and the system and method sealed and stopped automatically |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN107096220A true CN107096220A (en) | 2017-08-29 |
Family
ID=59669767
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201710364541.6A Pending CN107096220A (en) | 2017-05-22 | 2017-05-22 | A kind of plug-in detection of client and the system and method sealed and stopped automatically |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN107096220A (en) |
Cited By (11)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN108261765A (en) * | 2018-01-05 | 2018-07-10 | 珠海金山网络游戏科技有限公司 | The system and method for abnormal player is verified in a kind of game of mobile terminal |
| CN109045703A (en) * | 2018-07-24 | 2018-12-21 | 合肥爱玩动漫有限公司 | A method of detection network game external store |
| CN109364489A (en) * | 2018-12-12 | 2019-02-22 | 北京像素软件科技股份有限公司 | The dance movement processing method and processing device of based role game for play |
| CN109858549A (en) * | 2019-01-30 | 2019-06-07 | 腾讯科技（深圳）有限公司 | Training method, device and the medium of application identification and its identification model |
| WO2020000796A1 (en) * | 2018-06-28 | 2020-01-02 | 平安科技（深圳）有限公司 | Method and system for game supervision, and computer device |
| CN111068335A (en) * | 2019-12-25 | 2020-04-28 | 成都吉胜科技有限责任公司 | Anti-plug-in method and system for electronic competition |
| CN111265883A (en) * | 2019-12-24 | 2020-06-12 | 武汉勾勾互娱科技有限公司 | Anti-plug-in system and method for PC game |
| CN112957741A (en) * | 2021-03-03 | 2021-06-15 | 网易（杭州）网络有限公司 | Game report processing method and device and electronic equipment |
| CN114588637A (en) * | 2022-03-11 | 2022-06-07 | 网易（杭州）网络有限公司 | Method and device for detecting acceleration hanging in game and electronic equipment |
| CN115193058A (en) * | 2021-04-08 | 2022-10-18 | 广州问天信息技术有限公司 | System function of preventing plug-in from being opened more |
| WO2023019789A1 (en) * | 2021-08-19 | 2023-02-23 | 完美世界征奇(上海)多媒体科技有限公司 | Plug-in detection method and apparatus, electronic device, and storage medium |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN201134104Y (en) * | 2007-12-05 | 2008-10-15 | 诸松涛 | System for preventing external hung and monitoring of network game |
| US7587484B1 (en) * | 2001-10-18 | 2009-09-08 | Microsoft Corporation | Method and system for tracking client software use |
| CN106345119A (en) * | 2016-08-30 | 2017-01-25 | 江苏名通信息科技有限公司 | Method for processing online game plug-ins |
-
2017
- 2017-05-22 CN CN201710364541.6A patent/CN107096220A/en active Pending
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US7587484B1 (en) * | 2001-10-18 | 2009-09-08 | Microsoft Corporation | Method and system for tracking client software use |
| CN201134104Y (en) * | 2007-12-05 | 2008-10-15 | 诸松涛 | System for preventing external hung and monitoring of network game |
| CN106345119A (en) * | 2016-08-30 | 2017-01-25 | 江苏名通信息科技有限公司 | Method for processing online game plug-ins |
Cited By (15)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN108261765A (en) * | 2018-01-05 | 2018-07-10 | 珠海金山网络游戏科技有限公司 | The system and method for abnormal player is verified in a kind of game of mobile terminal |
| CN109224453B (en) * | 2018-06-28 | 2021-07-09 | 平安科技（深圳）有限公司 | Game supervision method and system, computer equipment and computer-readable storage medium |
| WO2020000796A1 (en) * | 2018-06-28 | 2020-01-02 | 平安科技（深圳）有限公司 | Method and system for game supervision, and computer device |
| CN109045703A (en) * | 2018-07-24 | 2018-12-21 | 合肥爱玩动漫有限公司 | A method of detection network game external store |
| CN109364489A (en) * | 2018-12-12 | 2019-02-22 | 北京像素软件科技股份有限公司 | The dance movement processing method and processing device of based role game for play |
| CN109364489B (en) * | 2018-12-12 | 2022-05-27 | 北京像素软件科技股份有限公司 | Dance action processing method and device based on role playing game |
| CN109858549A (en) * | 2019-01-30 | 2019-06-07 | 腾讯科技（深圳）有限公司 | Training method, device and the medium of application identification and its identification model |
| CN111265883A (en) * | 2019-12-24 | 2020-06-12 | 武汉勾勾互娱科技有限公司 | Anti-plug-in system and method for PC game |
| CN111068335A (en) * | 2019-12-25 | 2020-04-28 | 成都吉胜科技有限责任公司 | Anti-plug-in method and system for electronic competition |
| CN111068335B (en) * | 2019-12-25 | 2023-12-15 | 成都吉胜科技有限责任公司 | Anti-plug-in method and system for electronic competition |
| CN112957741A (en) * | 2021-03-03 | 2021-06-15 | 网易（杭州）网络有限公司 | Game report processing method and device and electronic equipment |
| CN112957741B (en) * | 2021-03-03 | 2024-02-02 | 网易（杭州）网络有限公司 | Game report processing method and device and electronic equipment |
| CN115193058A (en) * | 2021-04-08 | 2022-10-18 | 广州问天信息技术有限公司 | System function of preventing plug-in from being opened more |
| WO2023019789A1 (en) * | 2021-08-19 | 2023-02-23 | 完美世界征奇(上海)多媒体科技有限公司 | Plug-in detection method and apparatus, electronic device, and storage medium |
| CN114588637A (en) * | 2022-03-11 | 2022-06-07 | 网易（杭州）网络有限公司 | Method and device for detecting acceleration hanging in game and electronic equipment |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN107096220A (en) | A kind of plug-in detection of client and the system and method sealed and stopped automatically | |
| CN105989283B (en) | A kind of method and device identifying virus mutation | |
| CN103186740B (en) | A kind of automated detection method of Android malware | |
| CN108255729B (en) | Mobile phone game automatic testing method and system based on Unity platform | |
| CN101751535B (en) | Data loss protection through application data access classification | |
| CN106294094B (en) | Test method, client, server and system of game server | |
| CN109270850A (en) | A kind of intelligent household management system and method based on Internet of Things | |
| Goel et al. | Forensix: A robust, high-performance reconstruction system | |
| CN112473148B (en) | Method, device and system for anti-plug-in | |
| CN104598824A (en) | Method and device for detecting malicious programs | |
| CN106055983A (en) | Anti-debugging method of android application based on IDA communication | |
| EP3818680B1 (en) | Systems and methods for reporting computer security incidents | |
| Li et al. | Sarre: semantics-aware rule recommendation and enforcement for event paths on android | |
| CN109045703A (en) | A method of detection network game external store | |
| WO2020000796A1 (en) | Method and system for game supervision, and computer device | |
| CN109214171A (en) | A kind of detection method of software, device, equipment and medium | |
| CN105528546B (en) | Vulnerability mining method and device and electronic equipment | |
| CN107077563A (en) | Information processor, information processing method and program | |
| CN107409134A (en) | Method card analysis | |
| CN106055609A (en) | nginx log monitoring method and apparatus, message distribution system and information processing apparatus | |
| Tang et al. | Towards dynamically monitoring android applications on non-rooted devices in the wild | |
| CN108965251B (en) | A kind of safe mobile phone guard system that cloud combines | |
| CN109635993A (en) | Operation behavior monitoring method and device based on prediction model | |
| CN105468531B (en) | Vulnerability mining method and device and electronic equipment | |
| CN115398431A (en) | User information violation acquisition detection method and related equipment |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20170829 |
|
| RJ01 | Rejection of invention patent application after publication |