CN107729167A - Using abnormality eliminating method and device - Google Patents
Using abnormality eliminating method and device Download PDFInfo
- Publication number
- CN107729167A CN107729167A CN201610653675.5A CN201610653675A CN107729167A CN 107729167 A CN107729167 A CN 107729167A CN 201610653675 A CN201610653675 A CN 201610653675A CN 107729167 A CN107729167 A CN 107729167A
- Authority
- CN
- China
- Prior art keywords
- application process
- abnormal
- server
- abnormity
- frequency
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/07—Responding to the occurrence of a fault, e.g. fault tolerance
- G06F11/0796—Safety measures, i.e. ensuring safe condition in the event of error, e.g. for controlling element
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Quality & Reliability (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Debugging And Monitoring (AREA)
Abstract
The present invention relates to one kind to apply abnormality eliminating method and device, and this method includes：Operate the first application process；When increasing the abnormal document generated by operating system when first application process occurs abnormal newly in abnormal document folder, the abnormal document is monitored by monitoring process；Abnormal information is generated according to the abnormal document and reports to server；The no-operation instruction of the server feedback is received, the no-operation instruction generates according to the abnormal information reported；First application process is stopped operation according to the no-operation instruction.Application abnormality eliminating method and device provided by the invention, even if the first application process is collapsed in itself may also detect that exception, and it can avoid to a certain extent because the improper operation to the first application process causes the first application process that exception occurs.
Description
Technical field
The present invention relates to field of computer technology, and abnormality eliminating method and device are applied more particularly to one kind.
Background technology
With the continuous development that terminal hardware configures, answering for various, the achievable various functions of species can be run in terminal
With, such as application of taking pictures, Video Applications, music application or game application etc..It can occur unavoidably using operationally abnormal
Situation, it is applied in the abnormal caused abnormal information of generation and preserves, developer is fed back to by certain channel, favorably
The problems of the application, the application to overcome legacy version of redaction is developed according to the abnormal information in developer.
According to currently used application abnormality processing mode, application process can operationally set various possible exceptions
Processing mode corresponding to situation, when application process occur certain it is abnormal when, will use the abnormal conditions under processing mode
Corresponding abnormal information is reported to server.Answered however, current application abnormality processing mode needs to apply when occurring abnormal
It can be run in itself with process, abnormal information can not be just reported when application process is collapsed in itself.
The content of the invention
Based on this, it is necessary to just can not for current application abnormality processing mode when application process is collapsed in itself
Report the technical problem of abnormal information, there is provided one kind applies abnormality eliminating method and device.
One kind applies abnormality eliminating method, including：
Operate the first application process；
When the newly-increased exception generated by operating system when first application process occurs abnormal in abnormal document folder
During file, the abnormal document is monitored by monitoring process；
Abnormal information is generated according to the abnormal document and reports to server；
The no-operation instruction of the server feedback is received, the no-operation instruction is according to the abnormal letter reported
Breath generation；
First application process is stopped operation according to the no-operation instruction.
One kind applies exception handling device, including：
Operation module, for operating the first application process；
Monitoring modular, for being increased newly in being pressed from both sides when abnormal document by operating system when first application process occurs abnormal
During the abnormal document generated, the abnormal document is monitored by monitoring process；
Reporting module, for generating abnormal information according to the abnormal document and reporting to server；
Receiving module, for receiving the no-operation instruction of the server feedback, the no-operation instruction is according to upper
The abnormal information generation of report；
The operation module is additionally operable to stop operation first application process according to the no-operation instruction.
Above-mentioned application abnormality eliminating method and device, when the first application process occurs abnormal, by operating system in exception
Increase corresponding abnormal document in file newly, the abnormal document can be monitored by monitoring process, so as to monitor the first application
Process occurs abnormal.Even if the first application process is collapsed in itself, it can also be generated by operating system and record the different of this collapse
Normal file, and then exception is monitored by monitoring process, and reporting for abnormal information is carried out according to abnormal document.Moreover, as behaviour
After making the first application process, if exception occurs for the first application process, it can be stopped by server according to the abnormal information triggering reported
Only operational order, and then the first application process is stopped operation, it can avoid to a certain extent because of the improper behaviour to the first application process
It is abnormal that work causes the first application process to occur.
Brief description of the drawings
Fig. 1 is the applied environment figure that abnormality processing system is applied in one embodiment；
Fig. 2 is the structural representation of terminal in one embodiment；
Fig. 3 is the structural representation of server in one embodiment；
Fig. 4 is the schematic flow sheet that abnormality eliminating method is applied in one embodiment；
Fig. 5 is the timing diagram that abnormality eliminating method is applied in another embodiment；
Fig. 6 is the schematic diagram that advertising message intercepts configuration interface in one embodiment；
Fig. 7 is that Server remote controls terminal to close the schematic diagram that advertising message intercepts function in one embodiment；
Fig. 8 is the structured flowchart that exception handling device is applied in one embodiment.
Embodiment
In order to make the purpose , technical scheme and advantage of the present invention be clearer, it is right below in conjunction with drawings and Examples
The present invention is further elaborated.It should be appreciated that the specific embodiments described herein are merely illustrative of the present invention, and
It is not used in the restriction present invention.
Fig. 1 is the applied environment figure that abnormality processing system is applied in one embodiment.Reference picture 1, this applies abnormality processing
System includes terminal 110 and server 120, is communicated between terminal 110 and server 120 by network connection.Terminal 110 can be with
It is multiple.Wherein, terminal 110 can be used for the first application process of operation；Increased newly when in abnormal document folder by operating system first
During the abnormal document that application process is generated when occurring abnormal, abnormal document is monitored by monitoring process；According to abnormal document
Generation abnormal information simultaneously reports to server 120.Server 120 can be used for stopping operation finger according to the abnormal information generation reported
Order, and return to no-operation instruction to terminal 110.Terminal 110 can be used for the no-operation instruction that the reception server 120 is fed back；
First application process is stopped operation according to no-operation instruction.
Fig. 2 is the internal structure schematic diagram of terminal in one embodiment.As shown in Fig. 2 the terminal is including total by system
Processor, non-volatile memory medium, built-in storage and the network interface of line connection.Wherein, the non-volatile memories of terminal are situated between
Matter is stored with operating system, in addition to one kind applies exception handling device, and this is used to realize a kind of answer using exception handling device
Use abnormality eliminating method.The processor of terminal is used to provide calculating and control ability, supports the operation of whole terminal.In terminal
Built-in storage is provides environment in non-volatile memory medium using the operation of exception handling device.In the built-in storage of terminal
Computer-readable instruction can be stored, when the computer-readable instruction is executed by processor, may be such that computing device is a kind of and answer
Use abnormality eliminating method.Network interface is used to carry out network service with server, such as reports abnormal information to server, receives clothes
No-operation instruction that business device is sent etc..The terminal can be mobile phone, tablet personal computer or personal digital assistant or wearable set
It is standby etc..It will be understood by those skilled in the art that the structure shown in Fig. 2, the only part-structure related to application scheme
Block diagram, do not form the restriction for the terminal being applied thereon to application scheme, specific terminal can include than in figure
Shown more or less parts, either combine some parts or arranged with different parts.
Fig. 3 is the internal structure schematic diagram of server in one embodiment.As shown in figure 3, the server is including passing through
Processor, non-volatile memory medium, built-in storage and the network interface of bus of uniting connection.Wherein, the server is non-volatile
Property storage medium be stored with operating system, database and the exception handling device of applying suitable for server, database can be used for
The data such as history abnormal information are stored, this is used to realize a kind of application exception suitable for server using exception handling device
Reason method.The processor of the server is used to provide calculating and control ability, supports the operation of whole server.The server
Built-in storage is provides environment in non-volatile memory medium using the operation of exception handling device.The network interface of server
Communicated for the terminal according to this with outside by network connection.Server can use independent server either multiple servers
The server cluster of composition is realized.It will be understood by those skilled in the art that the structure shown in Fig. 3, it is only and the application
The block diagram of the related part-structure of scheme, does not form the restriction for the server being applied thereon to application scheme, specifically
Server can include than more or less parts shown in figure, either combine some parts or there is different portions
Part is arranged.
Fig. 4 is the schematic flow sheet that abnormality eliminating method is applied in one embodiment.Reference picture 2, the present embodiment is with the party
Method is applied to the terminal 110 in above-mentioned Fig. 1 to illustrate.This specifically comprises the following steps using abnormality eliminating method：
S402, operate the first application process.
Wherein, the first application is to need to monitor its abnormal application, can be take pictures application, Video Applications, music application
Or game application etc..First application process refers to the process of the first application, and the process is the example of the first application.Operation can be with
It is to the change of code or the modification of data etc. in the first application process.Terminal can operate first by the second application process should
Use process.First application process can be other arbitrarily should for the second application process of application process or removing specified
Use process.
In one embodiment, step S402 includes：The injecting codes into the first application process.Wherein, the injection of code
Refer to the process of the code with specific function being added in the application process being currently running and perform.Hook can be used in code injection
Sub (Hook) function or CreateRemoteThread (Remote thread injecting) function etc. are realized.
Code is executable, available for realization action interception or data modification etc. when being performed in the first application process
Function.In one embodiment, code is used for the advertising message for intercepting the triggering of the first application process upon execution.Advertising message is
Point to user push information, such as the Commdity advertisement information of Recommendations, recommend professional service service advertisement information or
Recommend commercial location advertising message of commercial location etc..Intercept the first application process triggering advertising message be by advertising message not
Presented, can be the action for intercepting the network request for being used for obtaining advertising message or intercepting displaying advertising message.
Code can identify advertising message by keyword match upon execution.
S404, when the newly-increased exception generated by operating system when the first application process occurs abnormal in abnormal document folder
During file, abnormal document is monitored by monitoring process.
Specifically, terminal creates system process by operating system, and the system process has System Privileges；In the first application
When process occurs abnormal, for example during the collapse of the first application process, terminal is got by system process and sent out in the first application process
The abnormal document generated when raw abnormal, and the abnormal document is increased newly in abnormal document folder.Terminal can be by being different from
One application process and the monitoring process monitoring abnormal document folder for being different from system process, so as to monitor to be increased newly in abnormal document folder
Abnormal document.
Wherein, the exception that the first application process occurs refers to that the first application process fails to transport according to the normal target being designed
State during row, including catching the exception for abnormality processing person is not caught the exception (Uncaught Exception) and set.
Abnormal document is to record abnormal file produced by the first application process, can include heap when the first application process occurs abnormal
Stack information.The abnormal document have recorded Exception Type, occur extremely position and the information such as the reason for cause exception.
In one embodiment, the first application process is operated by the second application process；Monitoring process is entered by the second application
Cheng Qidong；Second application process and monitoring process have the authority accessed across application.Wherein, the authority accessed across application refers to one
Individual application process may have access to the application space of another application process.Second application process and monitoring process can specifically obtain
Root authority or system authorities, so as to the authority accessed across application.
S406, abnormal information is generated according to abnormal document and reports to server.
Specifically, abnormal information can be generated by the monitoring process that the second application process is created according to abnormal document, and by
The monitoring process directly reports to server.Abnormal information also can be by the monitoring process that the second application process is created according to exception
File generated is simultaneously transferred to the second application process, and then reports to server by the second application process.Abnormal information may include different
The content of normal file, the information counted according to abnormal document can also be included, for example exception occurs for the second application process counted
Total degree, or specifying the second application process in the cycle that abnormal number occurs.
S408, the no-operation instruction of the reception server feedback, no-operation instruction generate according to the abnormal information reported.
Specifically, server directly can judge whether to meet to stop after abnormal information is received according to the abnormal information
The condition of operation, no-operation instruction is generated if meeting, and then report the terminal of abnormal information to feed back this to this and stop grasping
Instruct.Whether the condition stopped operation is specifically as follows causes this time abnormal judgement bar because operating the first application process
Part.
In one embodiment, server is after abnormal information is received, the abnormal information that can be also received according to this,
The history abnormal information that the terminal of abnormal information reported is reported with reference to this, or is combined and is included this and report abnormal information
The history abnormal information that multiple terminals of terminal are reported, judge whether to meet the condition stopped operation, generate and stop if meeting
Only operational order, and then report the terminal of abnormal information to feed back this no-operation instruction to this.Wherein, what this was received is different
Normal information is combined with history abnormal information, can be specifically that the abnormal information this time received is compared with history abnormal information
Compared with to judge whether to meet the condition stopped operation.
S410, the first application process is stopped operation according to no-operation instruction.
Specifically, terminal can be entered after no-operation instruction is received by the second application process to no-operation instruction
Row response, so as to stop the operation to the first application process.
In one embodiment, if step S402 includes：The injecting codes into the first application process；Step S410 includes：
The injecting codes into the first application process are stopped according to no-operation instruction.In the present embodiment, if receiving no-operation instruction,
Then subsequently the second application process injecting codes no longer into the first application process, pass through service when the first application process is run
To the behavior of the first application process injecting codes on device remote control terminal, can prevent because injecting generation to the first application process by force
It is abnormal that code causes the first application process to occur.
It is above-mentioned to apply abnormality eliminating method, when the first application process occurs abnormal, pressed from both sides by operating system in abnormal document
In increase newly corresponding abnormal document, the abnormal document can be monitored by monitoring process, so as to monitor the first application process send out
It is raw abnormal.Even if the first application process is collapsed in itself, the abnormal document for recording this collapse can also be generated by operating system,
And then exception is monitored by monitoring process, and reporting for abnormal information is carried out according to abnormal document.Moreover, when operation first should
After process, if exception occurs for the first application process, finger can be stopped operation according to the abnormal information triggering reported by server
Order, and then stops operation the first application process, can avoid to a certain extent because the improper operation to the first application process causes the
One application process occurs abnormal.
Reference picture 5, Fig. 5 are the timing diagram that abnormality eliminating method is applied in one embodiment.The application of the present embodiment is abnormal
Processing method specifically comprises the following steps：
S502, monitoring process is started by the second application process.
Wherein, the second application process is the process of the second application, and the second application is to be different from the first application and operating system
Application.Second application can be the application of specially for carrying out application abnormality eliminating method, or be integrated with and practice exception
The application of the software module of processing method.Second application process and monitoring process can be respectively provided with the authority accessed across application, tool
Body can have root authority or system authorities.
S504, abnormal document is monitored by monitoring process and pressed from both sides.
Specifically, terminal can by monitoring process in real time or periodic monitoring abnormal document press from both sides, can specifically monitor abnormal literary
Part folder is with the presence or absence of newly-increased abnormal document.
S506, by the second application process, into the first application process, injecting codes, code carry the second application process
Application feature.
Specifically, hook (Hook) function or CreateRemoteThread (remote thread notes can be used in code injection
Entering) function etc. realizes.The function such as realization action interception or data modification when code is used to perform in the first application process.Generation
Code is particularly used in the advertising message for intercepting the triggering of the first application process upon execution.The application feature of second application process, tool
Body can be the mark of the second application, such as bag name or title, can also be the data structure feature for being specific to the second application
Deng.Into the first application process, injecting codes are step S402 specific steps.
S508, by the system process of operating system, abnormal document is generated when the first application process occurs abnormal and is protected
Exist in abnormal document folder.
Specifically, if the first application process operationally occur it is abnormal, can by the exception handling of operating system,
To operating system unexpected message is sent dedicated for monitoring the abnormal system process of application.The unexpected message can carry foregoing
Using feature, environmental information during abnormal occur will also include.System process generates abnormal document according to the unexpected message, and will
Abnormal document is preserved to abnormal document and pressed from both sides.
S510, the abnormal document for monitoring to increase newly in abnormal document folder by monitoring process.
S512, by monitoring process, after being detected in abnormal document using feature, generated according to abnormal document abnormal
Information simultaneously reports to server.
Specifically, terminal can be by monitoring process, and by the way of Keywords matching, detecting in newly-increased abnormal document is
It is no foregoing application feature to be present.If existing and applying feature, terminal can be by monitoring process and according to newly-increased abnormal document
Generation abnormal information simultaneously reports to server.If in the absence of feature is applied, terminal can pass through monitoring process return to step S504
Continue to monitor abnormal document folder.
Instruction is injected in S514, the stopping fed back by the second application process the reception server, stops injection instruction according to upper
The abnormal information generation of report；Stop the injecting codes into the first application process according to stopping injecting instructing.
Wherein, it is a kind of no-operation instruction to stop injection instruction.Specifically, server is after abnormal information is received,
It directly can be judged whether to meet the condition for stopping injecting codes according to the abnormal information, the generation stopping injection instruction if meeting,
And then report the terminal of abnormal information to feed back this to this and stop injection instruction.The condition of stopping injecting codes being specifically as follows
It is no to cause this time abnormal Rule of judgment because of the injecting codes into the first application process.
Further, terminal can be received stopping injection by monitoring process and instruct and be transferred to the second application process, from
And stopping injection instruction is received by the second application process.Terminal can also directly pass through the second application process the reception server
The stopping injection instruction of feedback.Terminal is responded by the second application process to stopping injection instruction, subsequently in the first application
Process will not injecting codes into the first application process again when running.Stopped according to no-operation instruction into the first application process
Injecting codes are step S410 specific steps.
In the present embodiment, by the second application process into the first application process injecting codes so that the first application process
There can be the function that the first application process does not possess in itself.If the second application occurs abnormal after injecting codes, by abnormal information
After reporting to server, instruction is injected in the stopping that the reception server triggers according to the abnormal information, and then is stopped to the first application
Injecting codes in process, it can to a certain extent avoid causing the first application process abnormal because of injecting codes, ensure that injection generation
The availability of code.Further, after being detected in abnormal document using feature, abnormal information is generated simultaneously according to abnormal document
Server is reported to, exception caused by being likely to be injecting codes can be filtered out and reported, filter out unrelated exception
File, the accuracy of code injection control can be improved.
In one embodiment, no-operation instruction is touched by server when the first variable quantity is more than the first default variable quantity
Hair；Wherein, the first variable quantity is variable quantity of the second frequency of abnormity average compared to the first frequency of abnormity average；Described first is different
Normal number average is the frequency of abnormity average counted according to the abnormal information reported in first time period；Second frequency of abnormity
Average is the frequency of abnormity average counted according to the abnormal information reported in second time period；The first time period is described
Before two periods；The time point for operating first application process is more than the minimum boundary value of the first time period, and small
In the maximum boundary value of the second time period.
Specifically, server can determine that first time period and second time period so that operation first application process
Time point is more than the minimum boundary value of the first time period, and less than the maximum boundary value of the second time period.Wherein, grasp
The maximum boundary value of first time period can also be more than or equal to by making the time point of first application process, and be less than for the second time
The minimum boundary value of section.If first time period and second time period adjoining, the time point for operating first application process can
To be the adjoining time point of first time period and second time period.First time period and the respective time span of second time period can
With equal.
Further, server can obtain the first frequency of abnormity average of corresponding first time period, and obtain corresponding second
The second frequency of abnormity average of period.And first frequency of abnormity average can be in advance or when needed according in first time period
The abnormal information reported counts to obtain, and the second frequency of abnormity average can be in advance or when needed according to reporting in second time period
Abnormal information count to obtain.
Further, the first frequency of abnormity average can be subtracted the second frequency of abnormity and be worth to the first change by server
Amount.Server compares the size of the first variable quantity and the first default variable quantity, if the first variable quantity is more than the first default variable quantity
No-operation instruction is then triggered, can be without any action if the first variable quantity is less than the first default variable quantity.
Wherein, the abnormal information for counting used can be the abnormal information or each terminal that same terminal reports
The set of the abnormal information reported.Such as 48 hours, 24 hours or 12 hours period etc..Frequency of abnormity average can be phase
Answer the arithmetic mean of instantaneous value or weighted average of frequency of abnormity in the period.
In the present embodiment, time segment statistics frequency of abnormity average, the variable quantity of frequency of abnormity average in each period
It can reflect that abnormal number occurs for terminal whether in normal range (NR).If the first variable quantity is more than the first default variable quantity,
Represent after the first application process is operated, there occurs larger growth on the whole for frequency of abnormity, it is more likely that be due to operation the
One application process and cause frequency of abnormity to increase, now triggering no-operation instruction can improve the first application process is grasped
The safety of work.
For example, server can count daily frequency of abnormity average, for adjacent first day and second day, if
The first application process, and the frequency of abnormity average ratio frequency of abnormity of first day of second day are operated at first day or second day
Average has notable growth, then it is due to caused by the first application process of operation that can assert that frequency of abnormity increases, and is now triggered
No-operation instruction so that terminal stops the operation to the first application process.
In one embodiment, after the step s 410, it is a kind of also to include using abnormality eliminating method：The reception server is sent out
The unlatching operational order sent；Operational order is opened to be triggered when the second variable quantity is less than the second default variable quantity by server；Its
In, the second variable quantity is variable quantity of the 4th frequency of abnormity average compared to the 3rd frequency of abnormity average；Described 3rd is abnormal secondary
Number average is the frequency of abnormity average counted according to the abnormal information reported in the 3rd period；The 4th frequency of abnormity average
For the frequency of abnormity average counted according to the abnormal information reported in the 4th period；3rd period is at the described 4th
Between before section；The time point for triggering the no-operation instruction is more than the minimum boundary value of the 3rd period, and is less than institute
State the maximum boundary value of the 4th period；Start to perform step S402 according to operational order is opened.
Specifically, server can determine that the 3rd period and the 4th period so that trigger the no-operation instruction
Time point is more than the minimum boundary value of the 3rd period, and less than the maximum boundary value of the 4th period.Wherein, touch
The time point for sending out no-operation instruction described can also be more than or equal to the maximum boundary value of the 3rd period, and be less than for the 4th time
The minimum boundary value of section.If the 3rd period and the adjoining of the 4th period, the time point for triggering the no-operation instruction can
To be the adjoining time point of the 3rd period and the 4th period.3rd period and the 4th period respective time span can
With equal.
Further, server can obtain the 3rd frequency of abnormity average of corresponding 3rd period, and obtain the corresponding 4th
The 4th frequency of abnormity average of period.And the 3rd frequency of abnormity average can be in advance or when needed according in the 3rd period
The abnormal information reported counts to obtain, and the 4th frequency of abnormity average can be in advance or when needed according to reporting in the 4th period
Abnormal information count to obtain.
Yet further, the 3rd frequency of abnormity average can be subtracted the 4th frequency of abnormity and be worth to the second change by server
Amount.Server compares the size of the second variable quantity and the second default variable quantity, if the second variable quantity is less than the second default variable quantity
Then operational order is opened in triggering, can confirm that triggering no-operation instruction is if the second variable quantity is more than the second default variable quantity
Effectively.Wherein, it is the instruction for opening the function of being operated to the first application process to open operational order.Terminal is in root
After the first application process being stopped operation according to no-operation instruction, if the unlatching operational order is received, then resume operations
First application process.
In the present embodiment, time segment statistics frequency of abnormity average, the variable quantity of frequency of abnormity average in each period
It can reflect that abnormal number occurs for terminal whether in normal range (NR).If the second variable quantity is less than the second default variable quantity,
Represent after the operation to the first application process is stopped, frequency of abnormity does not change much on the whole, illustrates to stop answering first
The improvement of abnormal frequency is not brought with the operation of process, the no-operation instruction triggered is invalid, is now touched
Hair, which opens operational order, to correct erroneous judgement with operation of the retriggered to the first application process.
For example, server can count daily frequency of abnormity average, for adjacent first day and second day, if
No-operation instruction, and the frequency of abnormity average ratio frequency of abnormity of first day of second day are triggered at first day or second day
Change in Mean very little, then it can assert that the operation stopped to the first application process does not bring the improvement of abnormal frequency,
Now triggering opens operational order and is sent to terminal execution.
In one embodiment, foregoing application abnormality eliminating method is applied to multiple terminals；No-operation instruction is by taking
Device be engaged in after the abnormal information reported according to multiple terminals analyzes spatial abnormal feature feature, in the spatial abnormal feature feature analyzed
The terminal for currently opening the function of being operated to the first application process is triggered and fed back to when meeting public spatial abnormal feature feature.
Wherein, spatial abnormal feature is characterized in the feature of the abnormal distribution situation under different terminal environments of reflection.Terminal environments
For example the hardware environment and operating system environment of terminal, hardware environment can be distinguished by terminal models, operating system environment can lead to
Cross operating system version number differentiation.Public spatial abnormal feature feature refers to be judged as public abnormal abnormal possessed distribution spy
Sign.Public exception is to be present in the exception of the terminal environments more than default species number, is present in more than default kind
The number occurred under the terminal environments of class number and every kind of terminal environments exceedes the exception of preset times.
Specifically, the abnormal information that terminal can be reported according to multiple terminals, the different of the abnormal actual distribution of reflection is analyzed
Normal distribution characteristics, and then compared with public spatial abnormal feature feature.If the spatial abnormal feature feature analyzed and public exception point
Cloth characteristic matching, for example analyze and exceed default species number in the presence of the abnormal terminal environments, and occur under every kind of terminal environments
Abnormal number exceedes preset times, then triggers no-operation instruction, and no-operation instruction is fed back into current unlatching pair
The terminal for the function that first application process is operated.
In the present embodiment, when the spatial abnormal feature feature analyzed meets public spatial abnormal feature feature, illustrate this time abnormal
Individual problem but common problem, now to the terminal for currently opening the function of being operated to the first application process, make
Obtain corresponding terminal and stop operation the first application process, can effectively avoid public abnormal extensive appearance, can effectively control using different
Normal generation.
In one embodiment, when no-operation instruction is by server triggers so that server will be used in configuration file
It is configured to close in the configuration item of operation of the triggering to first application process, the configuration file is used to be used to grasp in installation
Initial configuration is carried out during the application for making first application process.
Specifically, application the second application described above for operating the first application process, terminal is in the application of installation second
When, it is necessary to from server download configuration file, the initial configuration of the second application is completed according to configuration file.Server is triggering
During operational order, the configuration item that the application process of trigger action first is used in the configuration file is configured to close.It is other also not
The terminal of the application of installation second stops operating the first application process when subsequent installation second is applied, by acquiescence, can have
Effect avoids public exception from appearing in the terminal to Add User, can effectively control using abnormal generation.
In one embodiment, no-operation instruction by server when the first variable quantity is more than the first default variable quantity,
After the abnormal information reported according to multiple terminals analyzes spatial abnormal feature feature, and meet in the spatial abnormal feature feature analyzed
Triggered during public spatial abnormal feature feature, and be fed back to the terminal for currently opening the function of being operated to the first application process.
Illustrate the above-mentioned principle using abnormality eliminating method with a concrete application scene below.Specifically, terminal A and
The second application process is run on terminal B, the second application process can provide advertising message as shown in Figure 6 and intercept configuration interface, can
For setting whether open the function of intercepting advertising message for each first application process.Second application process start monitor into
Journey, and by monitoring process monitoring abnormal document folder.Second application process is injected for intercepting advertising message to the first application process
Code.When the first application process occurs abnormal, the system process of operating system will be formed abnormal document increase newly it is abnormal literary
In part folder.Monitoring process monitors the abnormal document increased newly in abnormal document folder, and server is reported to so as to form abnormal information.
Reference picture 7, if it is secondary to report the frequency of abnormity average of the terminal A and terminal B of abnormal information on the day of to exceed habitually in the past daily exception
Number average, then whether it is common problem that server can continue according to the current exception of abnormal information judgement reported.If public ask
Topic is then sent to current all terminals such as terminal A and terminal B for opening interception advertisement information function stops injection instruction so that phase
Terminal is answered to close the advertising message interception function for the first application process.Meanwhile installation can also be used to intercept by server
The advertising message during application of advertisement information function in required configuration file for the first application process intercepts the configuration of function
Item is configured to close, and terminal such as the terminal C and terminal D of the subsequent installation application for being used to intercept advertisement information function, which will give tacit consent to, to close
The advertising message closed for the first application process intercepts function.
As shown in figure 8, in one embodiment, there is provided one kind applies exception handling device 800, including：Operation module
810th, monitoring modular 820, reporting module 830 and receiving module 840.
Operation module 810, for operating the first application process.
Monitoring modular 820, for being increased newly in being pressed from both sides when abnormal document by operating system when the first application process occurs abnormal
During the abnormal document generated, abnormal document is monitored by monitoring process.
Reporting module 830, for generating abnormal information according to abnormal document and reporting to server.
Receiving module 840, it is different according to what is reported for the no-operation instruction of the reception server feedback, no-operation instruction
Normal information generation.
Operation module 810 is additionally operable to stop operation the first application process according to no-operation instruction.
Above-mentioned application exception handling device 800, when the first application process occurs abnormal, by operating system in abnormal document
Increase corresponding abnormal document in folder newly, the abnormal document can be monitored by monitoring process, so as to monitor the first application process
Generation is abnormal.Even if the first application process is collapsed in itself, the exception that this collapse can also be recorded by operating system generation is literary
Part, and then exception is monitored by monitoring process, and reporting for abnormal information is carried out according to abnormal document.Moreover, when operation the
After one application process, if exception occurs for the first application process, behaviour can be stopped according to the abnormal information triggering reported by server
Instruct, and then stop operation the first application process, can avoid to a certain extent because the improper operation to the first application process is led
The first application process is caused to occur abnormal.
In one embodiment, operation module 810 is additionally operable to the injecting codes into the first application process；Basis is additionally operable to stop
Only operational order stops the injecting codes into the first application process.
In the present embodiment, if receiving no-operation instruction, subsequently when the first application process is run, the second application is entered
Cheng Buzai injecting codes into the first application process, controlled by Server remote in terminal to the first application process injecting codes
Behavior, can prevent from causing the first application process to occur to the first application process injecting codes because by force abnormal.
In one embodiment, code is used for the advertising message for intercepting the triggering of the first application process upon execution.
In one embodiment, operation module 810 is used to enter code injection to the first application by the second application process
Cheng Zhong；Code carries the application feature of the second application process；If reporting module 830 is additionally operable to detect in abnormal document and answered
With feature, then abnormal information is generated according to abnormal document and report to server.
In the present embodiment, after being detected in abnormal document using feature, abnormal information is generated simultaneously according to abnormal document
Server is reported to, exception caused by being likely to be injecting codes can be filtered out and reported, filter out unrelated exception
File, the accuracy of code injection control can be improved.
In one embodiment, no-operation instruction is touched by server when the first variable quantity is more than the first default variable quantity
Hair；Wherein, the first variable quantity is variable quantity of the second frequency of abnormity average compared to the first frequency of abnormity average；Described first is different
Normal number average is the frequency of abnormity average counted according to the abnormal information reported in first time period；Second frequency of abnormity
Average is the frequency of abnormity average counted according to the abnormal information reported in second time period；The first time period is described
Before two periods；The time point for operating first application process is more than the minimum boundary value of the first time period, and small
In the maximum boundary value of the second time period.
In the present embodiment, time segment statistics frequency of abnormity average, the variable quantity of frequency of abnormity average in each period
It can reflect that abnormal number occurs for terminal whether in normal range (NR).If the first variable quantity is more than the first default variable quantity,
Represent after the first application process is operated, there occurs larger growth on the whole for frequency of abnormity, it is more likely that be due to operation the
One application process and cause frequency of abnormity to increase, now triggering no-operation instruction can improve the first application process is grasped
The safety of work.
In one embodiment, receiving module 840 is additionally operable to be stopped operation according to no-operation instruction in operation module 810
After first application process, the unlatching operational order of the reception server transmission；Operational order is opened by server in the second variable quantity
Triggered during less than the second default variable quantity；Wherein, the second variable quantity is the 4th frequency of abnormity average compared to the 3rd frequency of abnormity
The variable quantity of average；The 3rd frequency of abnormity average is that the exception counted according to the abnormal information reported in the 3rd period is secondary
Number average；The 4th frequency of abnormity average is that the frequency of abnormity counted according to the abnormal information reported in the 4th period is equal
Value；3rd period is before the 4th period；The time point for triggering the no-operation instruction is more than described the
The minimum boundary value of three periods, and less than the maximum boundary value of the 4th period；
Operation module 810 is additionally operable to start to operate the first application process according to unlatching operational order.
In the present embodiment, after the first application process is stopped operation, if the second variable quantity is less than the second default variable quantity,
Frequency of abnormity does not vary widely on the whole after expression stops operation the first application process, it is more likely that frequency of abnormity increases simultaneously
Non- is to operate the first application process and cause, and the behaviour that operational order can be with retriggered to the first application process is opened in now triggering
Make, correct erroneous judgement.
In one embodiment, it is applied to multiple terminals using exception handling device 800；No-operation instruction is by server
After the abnormal information reported according to multiple terminals analyzes spatial abnormal feature feature, meet in the spatial abnormal feature feature analyzed
The terminal for currently opening the function of being operated to the first application process is triggered and fed back to during public spatial abnormal feature feature.
In the present embodiment, when the spatial abnormal feature feature analyzed meets public spatial abnormal feature feature, illustrate this time abnormal
Individual problem but common problem, now to the terminal for currently opening the function of being operated to the first application process, make
Obtain corresponding terminal and stop operation the first application process, can effectively avoid public abnormal extensive appearance, can effectively control using different
Normal generation.
In one embodiment, when no-operation instruction is by server triggers so that server will be used in configuration file
It is configured to close in the configuration item of operation of the triggering to first application process, the configuration file is used to be used to grasp in installation
Initial configuration is carried out during the application for making first application process.
In the present embodiment, server will be applied when trigger action instructs in the configuration file for trigger action first
The configuration item of process is configured to close.Other terminals for not installing the second application will also be given tacit consent to when subsequent installation second is applied
Stopping operates to the first application process, can effectively avoid public exception from appearing in the terminal to Add User, can effectively control
The abnormal generation of system application.
In one embodiment, operation module 810 is additionally operable to operate the first application process by the second application process；Monitoring
Module is additionally operable to start monitoring process by the second application process；Second application process and monitoring process have what is accessed across application
Authority.
One of ordinary skill in the art will appreciate that realize all or part of flow in above-described embodiment method, being can be with
The hardware of correlation is instructed to complete by computer program, the program can be stored in a non-volatile computer and storage can be read
In medium, the program is upon execution, it may include such as the flow of the embodiment of above-mentioned each method.Wherein, the storage medium can be magnetic
Dish, CD, read-only memory (Read-Only Memory, ROM) etc..
Each technical characteristic of above example can be combined arbitrarily, to make description succinct, not to above-described embodiment
In each technical characteristic it is all possible combination be all described, as long as however, lance is not present in the combination of these technical characteristics
Shield, all it is considered to be the scope of this specification record.
Above example only expresses the several embodiments of the present invention, and its description is more specific and detailed, but can not
Therefore it is construed as limiting the scope of the patent.It should be pointed out that for the person of ordinary skill of the art,
On the premise of not departing from present inventive concept, various modifications and improvements can be made, these belong to protection scope of the present invention.
Therefore, the protection domain of patent of the present invention should be determined by the appended claims.
Claims (18)
1. one kind applies abnormality eliminating method, including：
Operate the first application process；
When the newly-increased abnormal document generated by operating system when first application process occurs abnormal in abnormal document folder
When, the abnormal document is monitored by monitoring process；
Abnormal information is generated according to the abnormal document and reports to server；
The no-operation instruction of the server feedback is received, the no-operation instruction is given birth to according to the abnormal information reported
Into；
First application process is stopped operation according to the no-operation instruction.
2. according to the method for claim 1, it is characterised in that described the step of operating the first application process includes：
The injecting codes into the first application process；
Described the step of stopping operation first application process according to the no-operation instruction, includes：
The injecting codes into the first application process are stopped according to the no-operation instruction.
3. according to the method for claim 2, it is characterised in that the code is used to intercept first application upon execution
The advertising message of process triggers.
4. according to the method for claim 2, it is characterised in that the code is injected into described first by the second application process
In application process；The code carries the application feature of second application process；Methods described also includes：
If detected in the abnormal document it is described apply feature, perform and described abnormal letter generated according to the abnormal document
The step of ceasing and reporting to server.
5. according to the method for claim 1, it is characterised in that the no-operation instruction is become by the server first
Change amount triggers when being more than the first default variable quantity；Wherein, first variable quantity is the second frequency of abnormity average compared to first
The variable quantity of frequency of abnormity average；The first frequency of abnormity average is to be counted according to the abnormal information reported in first time period
Frequency of abnormity average；The second frequency of abnormity average is the exception counted according to the abnormal information reported in second time period
Number average；The first time period is before the second time period；The time point for operating first application process is more than
The minimum boundary value of the first time period, and less than the maximum boundary value of the second time period.
6. according to the method for claim 1, it is characterised in that described according to stopping operation the no-operation instruction
After the step of first application process, methods described also includes：
Receive the unlatching operational order that the server is sent；The unlatching operational order is by the server in the second variable quantity
Triggered during less than the second default variable quantity；Wherein, second variable quantity is that the 4th frequency of abnormity average is abnormal compared to the 3rd
The variable quantity of number average；The 3rd frequency of abnormity average is to count different according to the abnormal information reported in the 3rd period
Normal number average；The 4th frequency of abnormity average is the frequency of abnormity counted according to the abnormal information reported in the 4th period
Average；3rd period is before the 4th period；The time point of the no-operation instruction is triggered more than described
The minimum boundary value of 3rd period, and less than the maximum boundary value of the 4th period；
The step of starting to perform the first application process of the operation according to the unlatching operational order.
7. according to the method for claim 1, it is characterised in that methods described is applied to multiple terminals；It is described to stop operation
Instruction after the abnormal information reported according to the multiple terminal analyzes spatial abnormal feature feature, is being analyzed by the server
The spatial abnormal feature feature gone out triggers when meeting public spatial abnormal feature feature and feeds back to current open and applied to described first
The terminal for the function that process is operated.
8. according to the method for claim 7, it is characterised in that when the no-operation instruction is by the server triggers,
So that the configuration item for being used to trigger the operation to first application process in configuration file is configured to close by the server
Close, the configuration file is used to carry out initial configuration when installation is used for and operates the application of first application process.
9. according to the method for claim 1, it is characterised in that first application process is grasped by the second application process
Make；The monitoring process is started by second application process；Second application process and the monitoring process have across should
With the authority of access.
10. one kind applies exception handling device, it is characterised in that including：
Operation module, for operating the first application process；
Monitoring modular, in being pressed from both sides when abnormal document increase newly by operating system first application process occur it is abnormal when given birth to
Into abnormal document when, the abnormal document is monitored by monitoring process；
Reporting module, for generating abnormal information according to the abnormal document and reporting to server；
Receiving module, for receiving the no-operation instruction of the server feedback, the no-operation instruction is according to reporting
The abnormal information generation；
The operation module is additionally operable to stop operation first application process according to the no-operation instruction.
11. device according to claim 10, it is characterised in that the operation module is additionally operable into the first application process
Injecting codes；It is additionally operable to stop the injecting codes into the first application process according to the no-operation instruction.
12. device according to claim 11, it is characterised in that the code should for intercepting described first upon execution
With the advertising message of process triggers.
13. device according to claim 11, it is characterised in that operation module is used to pass through the second application process by code
It is injected into first application process；The code carries the application feature of second application process；It is described to report mould
If block be additionally operable to detect in the abnormal document it is described apply feature, abnormal information is generated simultaneously according to the abnormal document
Report to server.
14. device according to claim 10, it is characterised in that the no-operation instruction is by the server first
Variable quantity triggers when being more than the first default variable quantity；Wherein, first variable quantity is the second frequency of abnormity average compared to the
The variable quantity of one frequency of abnormity average；The first frequency of abnormity average is to be united according to the abnormal information reported in first time period
The frequency of abnormity average of meter；The second frequency of abnormity average is to count different according to the abnormal information reported in second time period
Normal number average；The first time period is before the second time period；The time point for operating first application process is big
In the minimum boundary value of the first time period, and less than the maximum boundary value of the second time period.
15. device according to claim 10, it is characterised in that the receiving module is additionally operable in the operation module root
After stopping operation first application process according to the no-operation instruction, receive the unlatching operation that the server is sent and refer to
Order；The unlatching operational order is triggered by the server when the second variable quantity is less than the second default variable quantity；Wherein, it is described
Second variable quantity is variable quantity of the 4th frequency of abnormity average compared to the 3rd frequency of abnormity average；3rd frequency of abnormity is equal
It is worth the frequency of abnormity average to be counted according to the abnormal information reported in the 3rd period；The 4th frequency of abnormity average is root
The frequency of abnormity average counted according to the abnormal information reported in the 4th period；3rd period is in the 4th period
Before；The time point for triggering the no-operation instruction is more than the minimum boundary value of the 3rd period, and less than described the
The maximum boundary value of four periods；
The operation module is additionally operable to start to operate first application process according to the unlatching operational order.
16. device according to claim 10, it is characterised in that described device is applied to multiple terminals；It is described to stop behaviour
Instruct by the server after the abnormal information reported according to the multiple terminal analyzes spatial abnormal feature feature, dividing
The spatial abnormal feature feature separated out triggers when meeting public spatial abnormal feature feature and feeds back to current open should to described first
The terminal for the function of being operated with process.
17. device according to claim 16, it is characterised in that the no-operation instruction is by the server triggers
When so that the configuration item for being used to trigger the operation to first application process in configuration file is configured to by the server
Close, the configuration file is used to carry out initial configuration when installation is used for and operates the application of first application process.
18. device according to claim 10, it is characterised in that the operation module is additionally operable to by the second application process
Operate first application process；The monitoring modular is additionally operable to start the monitoring process by second application process；
Second application process and the monitoring process have the authority accessed across application.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201610653675.5A CN107729167B (en) | 2016-08-10 | 2016-08-10 | Application exception handling method and device |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201610653675.5A CN107729167B (en) | 2016-08-10 | 2016-08-10 | Application exception handling method and device |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN107729167A true CN107729167A (en) | 2018-02-23 |
| CN107729167B CN107729167B (en) | 2020-09-11 |
Family
ID=61200334
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201610653675.5A Active CN107729167B (en) | 2016-08-10 | 2016-08-10 | Application exception handling method and device |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN107729167B (en) |
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN109587345A (en) * | 2018-12-28 | 2019-04-05 | 努比亚技术有限公司 | Abnormal Application Hints method, mobile terminal and computer readable storage medium |
| CN113434362A (en) * | 2021-06-24 | 2021-09-24 | 广州欢网科技有限责任公司 | Method and device for automatically early warning when Android program is abnormal |
| CN114564369A (en) * | 2022-04-28 | 2022-05-31 | 云账户技术(天津)有限公司 | Application program abnormity monitoring method and device, electronic equipment and storage medium |
Citations (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1904852A (en) * | 2006-08-01 | 2007-01-31 | 西安西电捷通无线网络通信有限公司 | Method for monitoring and abnormal processing of computer application program |
| CN101916224A (en) * | 2010-08-20 | 2010-12-15 | 迈普通信技术股份有限公司 | Test progress abnormality detection method and automatic test control device |
| CN102200941A (en) * | 2010-03-25 | 2011-09-28 | 杭州华三通信技术有限公司 | Method and unit for monitoring process state |
| CN104268080A (en) * | 2014-09-25 | 2015-01-07 | 北京金山安全软件有限公司 | Software exception handling method and device |
| CN104503892A (en) * | 2014-12-19 | 2015-04-08 | 宇龙计算机通信科技(深圳)有限公司 | Terminal exception processing method and device and terminal |
| CN105025318A (en) * | 2015-06-30 | 2015-11-04 | 北京奇艺世纪科技有限公司 | Feedback method and device for abnormal log information of application program |
| CN105389249A (en) * | 2015-10-29 | 2016-03-09 | Tcl集团股份有限公司 | Exception log generation configuring method and exception log generation configuring apparatus |
| CN105653455A (en) * | 2015-12-29 | 2016-06-08 | 广东欧珀移动通信有限公司 | Program vulnerability detection method and detection system |
| CN105657046A (en) * | 2016-02-24 | 2016-06-08 | 中国科学技术大学 | Method for injecting advertisements based on Openwrt router |
-
2016
- 2016-08-10 CN CN201610653675.5A patent/CN107729167B/en active Active
Patent Citations (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1904852A (en) * | 2006-08-01 | 2007-01-31 | 西安西电捷通无线网络通信有限公司 | Method for monitoring and abnormal processing of computer application program |
| CN102200941A (en) * | 2010-03-25 | 2011-09-28 | 杭州华三通信技术有限公司 | Method and unit for monitoring process state |
| CN101916224A (en) * | 2010-08-20 | 2010-12-15 | 迈普通信技术股份有限公司 | Test progress abnormality detection method and automatic test control device |
| CN104268080A (en) * | 2014-09-25 | 2015-01-07 | 北京金山安全软件有限公司 | Software exception handling method and device |
| CN104503892A (en) * | 2014-12-19 | 2015-04-08 | 宇龙计算机通信科技(深圳)有限公司 | Terminal exception processing method and device and terminal |
| CN105025318A (en) * | 2015-06-30 | 2015-11-04 | 北京奇艺世纪科技有限公司 | Feedback method and device for abnormal log information of application program |
| CN105389249A (en) * | 2015-10-29 | 2016-03-09 | Tcl集团股份有限公司 | Exception log generation configuring method and exception log generation configuring apparatus |
| CN105653455A (en) * | 2015-12-29 | 2016-06-08 | 广东欧珀移动通信有限公司 | Program vulnerability detection method and detection system |
| CN105657046A (en) * | 2016-02-24 | 2016-06-08 | 中国科学技术大学 | Method for injecting advertisements based on Openwrt router |
Cited By (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN109587345A (en) * | 2018-12-28 | 2019-04-05 | 努比亚技术有限公司 | Abnormal Application Hints method, mobile terminal and computer readable storage medium |
| CN109587345B (en) * | 2018-12-28 | 2021-09-07 | 努比亚技术有限公司 | Abnormal application prompting method, mobile terminal and computer readable storage medium |
| CN113434362A (en) * | 2021-06-24 | 2021-09-24 | 广州欢网科技有限责任公司 | Method and device for automatically early warning when Android program is abnormal |
| CN114564369A (en) * | 2022-04-28 | 2022-05-31 | 云账户技术(天津)有限公司 | Application program abnormity monitoring method and device, electronic equipment and storage medium |
| CN114564369B (en) * | 2022-04-28 | 2022-08-02 | 云账户技术(天津)有限公司 | Application program abnormity monitoring method and device, electronic equipment and storage medium |
Also Published As
| Publication number | Publication date |
|---|---|
| CN107729167B (en) | 2020-09-11 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US11593400B1 (en) | Automatic triage model execution in machine data driven monitoring automation apparatus | |
| US11798028B2 (en) | Systems and methods for monitoring malicious software engaging in online advertising fraud or other form of deceit | |
| US10942960B2 (en) | Automatic triage model execution in machine data driven monitoring automation apparatus with visualization | |
| US10412111B2 (en) | System and method for determining network security threats | |
| CN103744593B (en) | Mobile terminal and method for preventing mis-operation of mobile terminal | |
| Mathur et al. | Characterizing the Use of {Browser-Based} Blocking Extensions To Prevent Online Tracking | |
| US20190028557A1 (en) | Predictive human behavioral analysis of psychometric features on a computer network | |
| US20180248902A1 (en) | Malicious activity detection on a computer network and network metadata normalisation | |
| US20180246797A1 (en) | Identifying and monitoring normal user and user group interactions | |
| CN107729167A (en) | Using abnormality eliminating method and device | |
| CN107329894A (en) | Application program system method of testing, device and electronic equipment | |
| CN110113315A (en) | A kind of processing method and equipment of business datum | |
| CN105653944A (en) | Detection method and device of cheating behaviors | |
| US20180329795A1 (en) | User interaction logic classification | |
| CN110442502A (en) | A kind of method, apparatus buried a little, equipment and storage medium | |
| CN110083472A (en) | Application crashes processing method, device, computer equipment and storage medium | |
| CN106484592A (en) | A kind of method for detecting abnormality and device | |
| CN109358765A (en) | Terminal, the method, apparatus and storage medium for executing operation at the terminal | |
| US9098804B1 (en) | Using data aggregation to manage a memory for an event-based analysis engine | |
| CN108595957A (en) | Main browser page altering detecting method, device and storage medium | |
| CN109271059A (en) | False-touch prevention method, terminal and the computer readable storage medium of screen | |
| CN107704734A (en) | A kind of recognition methods of user account and its equipment | |
| CN112667338B (en) | Business line display control method and device, electronic equipment and storage medium | |
| CN104423844B (en) | A kind of information processing method, device and electronic equipment | |
| CN109800099A (en) | A kind of restoring method, storage medium and the terminal device of user's operation behavior |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |