CN107741907A - With reference to bottom instruction and the simulator detection method and device of system information - Google Patents

With reference to bottom instruction and the simulator detection method and device of system information Download PDF

Info

Publication number
CN107741907A
CN107741907A CN201710922740.4A CN201710922740A CN107741907A CN 107741907 A CN107741907 A CN 107741907A CN 201710922740 A CN201710922740 A CN 201710922740A CN 107741907 A CN107741907 A CN 107741907A
Authority
CN
China
Prior art keywords
information
application program
detected
simulator
instruction
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN201710922740.4A
Other languages
Chinese (zh)
Inventor
阚志刚
陈彪
刘志豪
孙俊飞
方宁
卢佐华
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Beijing Bang Bang Safety Technology Co Ltd
Original Assignee
Beijing Bang Bang Safety Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Beijing Bang Bang Safety Technology Co Ltd filed Critical Beijing Bang Bang Safety Technology Co Ltd
Priority to CN201710922740.4A priority Critical patent/CN107741907A/en
Publication of CN107741907A publication Critical patent/CN107741907A/en
Pending legal-status Critical Current

Links

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00Error detection; Error correction; Monitoring
    • G06F11/36Preventing errors by testing or debugging software
    • G06F11/3668Software testing
    • G06F11/3672Test management
    • G06F11/3688Test management for test execution, e.g. scheduling of test suites

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Quality & Reliability (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Debugging And Monitoring (AREA)

Abstract

The embodiment of the present application discloses the simulator detection method and device of a kind of combination bottom instruction and system information, and this method includes:According to the relevant information of application program to be detected, the application program to be detected is run;During the application program to be detected is run, corresponding feedback information is obtained by sending bottom code instruction, and obtain the system information of the operating system where the application program to be detected, wherein, the instruction for the subregion state information for being used to obtain flash memory is comprised at least in the bottom code instruction;If do not include predetermined information in the feedback information and/or the configuration information, it is determined that the application program to be detected is run in simulator.Using the embodiment of the present application, whether the running position that can judge application program in fact is in simulator, so as to improve the information security of the user using corresponding application programs.

Description

With reference to bottom instruction and the simulator detection method and device of system information
Technical field
The application is related to field of computer technology, more particularly to the simulator of a kind of instruction of combination bottom and system information is examined Survey method and device.
Background technology
With the development of terminal technology, the application of simulator is also increasingly known.Simulator refers to main saturating The function of software analog hardware processor and the program of instruction system are crossed, so that computer or other multimedia platforms are (as put down Plate computer or mobile phone etc.) application program of software on other platforms can be run.
Simulator can carry out such as failure tree analysis (FTA), test VLSI (Very Large Scale Integration, greatly Scale integrated circuit) the complicated simulation task such as logical design, the generation of simulator with using being tester and developer Provide convenience, tester or developer can change the configuration parameter of various terminal equipment by simulator, so as to reach To the purpose of test and accident analysis.
However, simulator is not to be provided only to above-mentioned tester and developer, but anyone can pass through Network obtains, moreover, hacker many times needs to change hardware in the related cheating software of automatic operating application program Information, and the method for conventional change hardware information is exactly to use simulator, and various terminal equipment can be changed by simulator Configuration parameter, so, not only can by simulator forge multiple terminal devices, can also be distorted in simulator using journey The data of sequence, so as to jeopardize the information security for the user for using the application program, therefore, judging the running position of application program is No is to turn into urgent problem in simulator.
The content of the invention
The purpose of the embodiment of the present application be to provide a kind of instruction of combination bottom and system information simulator detection method and Device, it is possible to determine that whether the running position of application program is in simulator, so as to improve the use using corresponding application programs The information security at family.
In order to solve the above technical problems, what the embodiment of the present application was realized in:
A kind of instruction of combination bottom and the simulator detection method of system information that the embodiment of the present application provides, methods described Including:
According to the relevant information of application program to be detected, the application program to be detected is run;
During the application program to be detected is run, corresponding feedback letter is obtained by sending bottom code instruction Breath, and the system information of the operating system where the application program to be detected is obtained, wherein, in the bottom code instruction extremely It is few to include being used to obtain the instruction of the subregion state information of flash memory;
If do not include predetermined information in the feedback information and/or the system information, it is determined that it is described it is to be detected should Run with program in simulator.
Alternatively, if not including predetermined information in the system information, it is determined that the application program to be detected Run in simulator, including:
If the device identification of the terminal device where not including the application program to be detected in the system information, And/or the system information includes simulator possessed relevant information, it is determined that the application program to be detected is being simulated Run in device.
Alternatively, the instruction of cpu instruction concentration is also included and/or for obtaining caching mechanism in the bottom code instruction Instruction;
If do not include predetermined information in the feedback information, it is determined that the application program to be detected is in simulator Middle operation, including:
If do not include one or more of information in the feedback information, it is determined that the application program to be detected exists Run in simulator:The relevant information of the subregion state information of the flash memory, CPU information and caching mechanism.
Alternatively, the system information of the operating system where the acquisition application program to be detected, including:
Obtain in the operating system /proc/version files;
The system kernel version information included in described/proc/version files is read as the system information.
Alternatively, the simulator possessed relevant information include by call perform adb get-serialno or Person adb devices are scanned for, the information in the search result of output.
A kind of instruction of combination bottom and the simulator detection means of system information that the embodiment of the present application provides, described device Including:
Program runs module, for the relevant information according to application program to be detected, runs the application program to be detected;
Data obtaining module, for during the application program to be detected is run, being referred to by sending bottom code Order obtains corresponding feedback information, and obtains the system information of the operating system where the application program to be detected, wherein, institute State the instruction that the subregion state information for being used to obtain flash memory is comprised at least in bottom code instruction;
Determining module, if for not including predetermined information in the feedback information and/or the system information, it is determined that The application program to be detected is run in simulator.
Alternatively, the determining module, if for not including the application program institute to be detected in the system information Terminal device device identification, and/or, the system information includes simulator possessed relevant information, it is determined that The application program to be detected is run in simulator.
Alternatively, the instruction of cpu instruction concentration is also included and/or for obtaining caching mechanism in the bottom code instruction Instruction;
The determining module, if for not including one or more of information in the feedback information, it is determined that institute Application program to be detected is stated to run in simulator:Subregion state information, the CPU information of the flash memory are related to caching mechanism Information.
Alternatively, described information acquisition module, including:
File obtaining unit, for obtain in the operating system /proc/version files;
Information acquisition unit, make for reading the system kernel version information included in described/proc/version files For the system information.
Alternatively, the simulator possessed relevant information include by call perform adb get-serialno or Person adb devices are scanned for, the information in the search result of output.
The technical scheme provided from above the embodiment of the present application, the embodiment of the present application according to be detected by applying journey The relevant information of sequence, application program to be detected is run, during application program to be detected is run, by sending bottom code Instruction obtains corresponding feedback information, and obtains the system information of the operating system where application program to be detected, wherein, bottom The instruction for the subregion state information for being used to obtain flash memory is comprised at least in code command, if the feedback information and/or the system Do not include predetermined information in information, it is determined that application program to be detected is run in simulator, so, by including for obtaining The operating system where bottom code instruction and/or application program to be detected including the instruction of the subregion state information of flash memory System information, you can judge whether application program to be detected is run in simulator so that simulator detection process is simple and easy, And improve the information security of the user using corresponding application programs.
Brief description of the drawings
, below will be to embodiment or existing in order to illustrate more clearly of the embodiment of the present application or technical scheme of the prior art There is the required accompanying drawing used in technology description to be briefly described, it should be apparent that, drawings in the following description are only this Some embodiments described in application, for those of ordinary skill in the art, do not paying the premise of creative labor Under, other accompanying drawings can also be obtained according to these accompanying drawings.
Fig. 1 is the simulator detection method embodiment of a kind of combination bottom instruction of the application and system information;
Fig. 2 is another simulator detection method embodiment for combining bottom instruction and system information of the application;
Fig. 3 is the simulator detection means embodiment of a kind of combination bottom instruction of the application and system information;
Fig. 4 is the simulator detection device embodiment of a kind of combination bottom instruction of the application and system information.
Embodiment
The embodiment of the present application provides the simulator detection method and device of a kind of combination bottom instruction and system information.
In order that those skilled in the art more fully understand the technical scheme in the application, it is real below in conjunction with the application The accompanying drawing in example is applied, the technical scheme in the embodiment of the present application is clearly and completely described, it is clear that described implementation Example only some embodiments of the present application, rather than whole embodiments.It is common based on the embodiment in the application, this area The every other embodiment that technical staff is obtained under the premise of creative work is not made, it should all belong to the application protection Scope.
Embodiment one
As shown in figure 1, the embodiment of the present application provides the simulator detection method of a kind of combination bottom instruction and system information, The executive agent of this method can be terminal device, the terminal device can such as personal computer equipment, can also as mobile phone, The mobile terminal devices such as tablet personal computer.This method can be used for detecting whether the application program currently run is in simulator Deng.This method specifically may comprise steps of:
In step S101, according to the relevant information of application program to be detected, the application program to be detected is run.
Wherein, the application program of application program to be detected can be any application, for example, instant messaging application journey Sequence, shopping application program or video application etc..The relevant information of application program to be detected can apply journey including to be detected The information such as title, installation addresses, the title of quickly starting mode and the storage location of sequence.
In force, when it needs to be determined that a certain application program (application program i.e. to be detected) is operated in simulator, still When running directly in the operating system of terminal device, the application program can accordingly be detected, specifically, can be obtained Title of application program to be detected etc. is identified, and then, the mark of the application program to be detected based on acquisition is looked into from terminal device The installation addresses (or installation site) of the application program to be detected are looked for, and can be in the installation addresses or installed position found The installation file of application program to be detected is searched, the startup file of application program to be detected can be obtained from its installation file, The startup file is run to start application program to be detected, so as to run application program to be detected.
In step s 102, during operationally stating application program to be detected, obtained by sending bottom code instruction Corresponding feedback information is taken, and obtains the system information of the operating system where application program to be detected, wherein, the bottom code The instruction for the subregion state information for being used to obtain flash memory is comprised at least in instruction.
Wherein, bottom code instruction can be a kind of code instructions for being inclined to computer, can be based on writing answering A kind of instruction of code building used in program, bottom code instruction can include a variety of, such as the finger that cpu instruction is concentrated Order etc..Feedback information can be the information for the data that bottom code instruction request obtains.Operation where application program to be detected System refers to that currently the relied on operating system of operation or program environment, the operating system are specifically as follows application program to be detected Android operation system, or program environment of certain operating system simulated by simulator etc..Where application program to be detected The system information of operating system can include a variety of, such as the mark of operating system, the title of operating system and operating system Version information etc..
In force, after application program to be detected is run by above-mentioned steps S101 processing, application program to be detected Corresponding data are loaded to carry out the initialization of application program, during application program to be detected loads data, or, treat After the completion of detecting application program loading data, the subregion state information for obtaining flash memory can be sent to application program to be detected Instruction, when application program to be detected receives the instruction, related data corresponding to the instruction can be obtained., wherein it is desired to say Bright, if application program to be detected is operated on simulator, some data can not obtain in simulator, because Acquisition of the simulator for the relevant parameter in the terminal device where it is different from the authority used.Application program to be detected The data of acquisition can be arranged in feedback information, and terminal device can be sent it to, the terminal device receives instead After feedforward information, the feedback information received can be analyzed, it is determined that the data wherein included.If wrapped in the feedback information The subregion state information of flash memory is included, then can determine that the application program to be detected is not run in simulator, if the feedback letter Do not include the subregion state information of flash memory in breath, then can determine that the application program to be detected is run in simulator.
It should be noted that except the finger of the subregion state information for obtaining flash memory can be included in bottom code instruction Order is outer, can also include a variety of different instructions, and corresponding number can be obtained respectively by multiple different bottom code instructions According to.It is also non-mould that can more accurately judge that application program to be detected is operated in simulator by obtained different data Intend in device.
Further, it is also possible to the system information of the operating system where obtaining application program to be detected, passes through the system of acquisition Information judges whether application program to be detected is run in simulator, specifically, based on above-mentioned related content, it is to be detected should During data being loaded with program, or, after the completion of application program to be detected loading data, it can obtain and to be detected apply journey Mark, title and version information of operating system where sequence etc.., wherein it is desired to explanation, if application program to be detected When operating on simulator, the information such as mark, title and version information of the operating system where application program to be detected can refer to Show that application program to be detected is operated in the program environment of the operating system of simulator simulation, now, application program institute to be detected Mark, title and the version information of operating system be not really or the in practice mark of existing operating system, name Title and version information.If the information such as mark, title and version information according to the operating system where application program to be detected Determine that the operating system is real or existing operating system, such as Android operation system in practice, it may be determined that to be checked Survey application program not run in simulator, otherwise, it may be determined that application program to be detected is run in simulator.
It should be noted that mark, title and the version letter of the operating system where above-mentioned acquisition application program to be detected The processing of breath can be accomplished in several ways, and can specifically be set according to actual conditions.
In step s 103, if not including predetermined information in above-mentioned feedback information and/or said system information, it is determined that Application program to be detected is run in simulator.
Wherein, predetermined information can be directed to different feedback informations and/or said system information information set in advance, Or or above-mentioned predetermined information mark etc..Simulator can utilize correlation by terminal devices such as computers A kind of application program of software programming, the complexity such as failure tree analysis (FTA), test VLSI logical designs can be carried out by simulator Simulation task.Simulator can generally include a variety of, such as computer simulator or network game simulator etc..
In force, after obtaining feedback information by above-mentioned steps S102 processing, number can be extracted from feedback information According to if wherein only including a kind of data, can directly analyzing the data extracted, determine whether comprising pre- Determine information, for example, bottom code instruction only includes the instruction of the subregion state information for obtaining flash memory, then can extract feedback All data included in information, and the subregion state information of flash memory is therefrom searched, if do not found, can determine to treat Detection application program is run in simulator;If finding the subregion state information of flash memory, application to be detected can be determined Program is not run in simulator.If feedback information includes a variety of data, i.e. bottom code instruction includes multiple differences Instruction, then the data in feedback information can be separated, obtain data corresponding to different bottom code instructions, if Each item data in feedback information is all unsatisfactory for the condition that application program to be detected is run in simulator, then can be determined that and treat Detection application program is not run in simulator, otherwise, it is possible to determine that and application program to be detected is run in simulator, wherein, If each item data in feedback information all meets the condition that application program to be detected is run in simulator, can be determined that Application program to be detected is run in simulator.
, can when information such as the marks, title and version information of the operating system where getting application program to be detected So that the relevant information of the above- mentioned information different operating system with prestoring respectively to be contrasted, if above- mentioned information instruction is treated Detection application program is operated in the program environment of the operating system of simulator simulation, then can determine that application program to be detected exists Run in simulator, if by contrast, found the relevant information and the mark of the operating system obtained of an operating system Knowledge, title and matches version information, then can determine that application program to be detected is not run in simulator.
The embodiment of the present application provides the simulator detection method of a kind of combination bottom instruction and system information, is treated by basis The relevant information of application program is detected, runs application program to be detected, during application program to be detected is run, passes through hair Send bottom code instruction to obtain corresponding feedback information, and obtain the system letter of the operating system where application program to be detected Breath, wherein, the instruction for the subregion state information for being used to obtain flash memory is comprised at least in bottom code instruction, if the feedback information And/or do not include predetermined information in the system information, it is determined that application program to be detected is run in simulator, so, is passed through Where bottom code instruction and/or application program to be detected including the instruction of the subregion state information for obtaining flash memory Operating system system information, you can judge whether application program to be detected is run in simulator so that simulator detect Process is simple and easy, and improves the information security of the user using corresponding application programs.
Embodiment two
As shown in Fig. 2 the embodiment of the present application provides the simulator detection method of a kind of combination bottom instruction and system information, The executive agent of this method can be terminal device, the terminal device can such as personal computer equipment, can also as mobile phone, The mobile terminal devices such as tablet personal computer.This method can be used for detecting whether the application program currently run is in simulator Deng.This method specifically may comprise steps of:
In step s 201, according to the relevant information of application program to be detected, application program to be detected is run.
Above-mentioned steps S201 step content is identical with the step content of the step S101 in above-described embodiment one, step S201 concrete processing procedure may refer to above-mentioned steps S101 related content, will not be repeated here.
In step S202, during application program to be detected is run, phase is obtained by sending bottom code instruction The feedback information answered.Wherein, bottom code instruction includes the instruction for being used to obtain the subregion state information of flash memory and CPU refers to The instruction concentrated is made, the instruction that cpu instruction is concentrated can include a variety of, such as MMX (MultiMedia eXtensions, more matchmakers Body extends) instruction, SSE (extension of Streaming SIMD Extensions, SIMD Flow Technique) instructions etc..
In force, after application program to be detected is run by above-mentioned steps S101 processing, application program to be detected Corresponding data are loaded to carry out the initialization of application program, during application program to be detected loads data, or, treat After the completion of detecting application program loading data, CPU can be obtained to the instruction that application program to be detected transmission cpu instruction is concentrated Relevant information, when application program to be detected receives the instruction, can obtain this specify corresponding to data., wherein it is desired to say Bright, if application program to be detected is operated on simulator, some data can not obtain in simulator, because Acquisition of the simulator for the relevant parameter in the terminal device where it is different from the authority used.Application program to be detected The information of acquisition can be arranged in feedback information.Meanwhile the related content in above-described embodiment one, Ke Yitong can be passed through The instruction for crossing the subregion state information for obtaining flash memory obtains corresponding data.It is then possible to the data of acquisition are arranged on Terminal device is sent in feedback information, after the terminal device receives feedback information, the feedback information received can be entered Row analysis, it is determined that the data wherein included.If the feedback information includes the subregion state information and/or CPU information of flash memory, It can then determine that the application program to be detected is not run in simulator, if not including the subregion shape of flash memory in the feedback information State information and/or CPU information, then it can determine that the application program to be detected is run in simulator.
In step S203, during application program to be detected is run, the behaviour where application program to be detected is obtained Make in system /proc/version files.
In force ,/proc catalogues are a kind of file system in linux system, i.e. proc file system.With it is other often Unlike the file system seen ,/proc is a kind of pseudo file system (that is to say Virtual File System), and storage is in current A series of special files of core running status, user can by the relevant terminal device hardware of these Fileviews and it is current The information of the program process of operation, it might even be possible to change the running status of kernel by changing some of which file./proc/ The related information of the kernel version of operating system is stored with version files, wherein the equipment mark of terminal device can be included Know (such as equipment Serial Number), the title of operating system, version number, and relevant information of simulator etc..
In step S204, read the system kernel version information conduct included in above-mentioned/proc/version files and treat The system information of operating system where detection application program.
Wherein, system kernel version information can include linux kernel version, gcc compiled versions, Red Hat versions letter Breath etc..
Above-mentioned steps S202 and step S203- steps S204 processing can simultaneously perform or with any priority Order performs, such as first carries out step S203- steps S204 processing, then performs step S202 processing etc. again, and not The a kind of of above-mentioned offer is provided and performs processing mode.
Further, it is also possible to the related information of simulator is searched by modes such as search, specifically can be real in several ways It is existing, a kind of optional implementation presented below, it can specifically include herein below:Adb get- are performed by calling Serialno or adb devices are scanned for, and the related information of simulator is searched from the search result of output.
Wherein, adb get-serialno be an Android operation system ADB (Android Debug Bridge, Android debugs bridge) information such as order, mark and sequence number for obtaining terminal device.Adb devices can be used for looking into Look for local list of devices.
In force, it can be performed by way of call function and search the information related to simulator, specifically, can be with Initiate function call instruction, respective function can be called by function call instruction with perform adb get-serialno or Adb devices are instructed.It can be instructed by adb get-serialno or adb devices and scan for handling, and from Searched whether in the search result searched comprising the related information of simulator (or emulator).
In step S205, if not including subregion state information, CPU information and the caching of flash memory in above-mentioned feedback information At least one information in the relevant information of mechanism, and/or, including where application program to be detected in said system information The device identification of terminal device, and/or, the system information includes simulator possessed relevant information, it is determined that to be detected Application program is run in simulator, it is determined that application program to be detected is run in simulator.
In force, data can be extracted from feedback information, determine whether to include respectively by the data of extraction The subregion state information and/or CPU information of flash memory, if obtained including open/proc/diskstats is performed The information of the related contents such as mmcblk0 partition informations, then it can determine that feedback information includes the subregion state information of flash memory, such as Fruit can then determine that feedback information includes CPU information, if feedback letter including the information of the fields such as such as intel or AMD Do not include the subregion state information of flash memory in breath, and/or, do not include CPU information in the feedback information, it is determined that application to be detected Program is run in simulator.Otherwise, it may be determined that application program to be detected is not run in simulator.
Further, it is also possible to analyze system information, system information can include a variety of, such as application program to be detected The device identification of the terminal device at place, and simulator possessed relevant information etc..It should be noted that simulator is general Do not possess the information such as mark and the sequence number of terminal device.
The embodiment of the present application provides the simulator detection method of a kind of combination bottom instruction and system information, is treated by basis The relevant information of application program is detected, runs application program to be detected, during application program to be detected is run, passes through hair Send bottom code instruction to obtain corresponding feedback information, and obtain the system letter of the operating system where application program to be detected Breath, wherein, the instruction for the subregion state information for being used to obtain flash memory is comprised at least in bottom code instruction, if the feedback information And/or do not include predetermined information in the system information, it is determined that application program to be detected is run in simulator, so, is passed through Where bottom code instruction and/or application program to be detected including the instruction of the subregion state information for obtaining flash memory Operating system system information, you can judge whether application program to be detected is run in simulator so that simulator detect Process is simple and easy, and improves the information security of the user using corresponding application programs.
Embodiment three
The combination bottom instruction provided above for the embodiment of the present application and the simulator detection method of system information, based on same The thinking of sample, the embodiment of the present application also provides the simulator detection means of a kind of combination bottom instruction and system information, such as Fig. 3 institutes Show.
The simulator detection means of the combination bottom instruction and system information includes:Program operation module 301, information obtain Modulus block 302 and determining module 303, wherein:
Program runs module 301, and for the relevant information according to application program to be detected, operation is described to be detected to apply journey Sequence;
Data obtaining module 302, for during the application program to be detected is run, by sending bottom code Instruction obtains corresponding feedback information, and obtains the system information of the operating system where the application program to be detected, wherein, The instruction for the subregion state information for being used to obtain flash memory is comprised at least in the bottom code instruction;
Determining module 303, if for not including predetermined information in the feedback information and/or the system information, Determine that the application program to be detected is run in simulator.
Alternatively, the determining module 303, if for not including the application program to be detected in the system information The device identification of the terminal device at place, and/or, the system information includes simulator possessed relevant information, then really The fixed application program to be detected is run in simulator.
Alternatively, the instruction of cpu instruction concentration is also included and/or for obtaining caching mechanism in the bottom code instruction Instruction;
The determining module 303, if for not including one or more of information in the feedback information, it is determined that The application program to be detected is run in simulator:The phase of the subregion state information of the flash memory, CPU information and caching mechanism Close information.
Alternatively, described information acquisition module 302, including:
File obtaining unit, for obtain in the operating system /proc/version files;
Information acquisition unit, make for reading the system kernel version information included in described/proc/version files For the system information.
Alternatively, the simulator possessed relevant information include by call perform adb get-serialno or Person adb devices are scanned for, the information in the search result of output.
The embodiment of the present application provides the simulator detection means of a kind of combination bottom instruction and system information, is treated by basis The relevant information of application program is detected, runs application program to be detected, during application program to be detected is run, passes through hair Send bottom code instruction to obtain corresponding feedback information, and obtain the system letter of the operating system where application program to be detected Breath, wherein, the instruction for the subregion state information for being used to obtain flash memory is comprised at least in bottom code instruction, if the feedback information And/or do not include predetermined information in the system information, it is determined that application program to be detected is run in simulator, so, is passed through Where bottom code instruction and/or application program to be detected including the instruction of the subregion state information for obtaining flash memory Operating system system information, you can judge whether application program to be detected is run in simulator so that simulator detect Process is simple and easy, and improves the information security of the user using corresponding application programs.
Example IV
The combination bottom instruction provided above for the embodiment of the present application and the simulator detection means of system information, based on same The thinking of sample, the embodiment of the present application also provides the simulator detection device of a kind of combination bottom instruction and system information, such as Fig. 4 institutes Show.
It can be that the terminal that above-described embodiment provides is set that this, which combines bottom instruction and the simulator detection device of system information, It is standby etc..
With reference to bottom instruction and system information simulator detection device can because configure or performance it is different produce it is bigger Difference, one or more processor 401 and memory 402 can be included, one can be stored with memory 402 Or more than one storage application program or data.Wherein, memory 402 can be of short duration storage or persistently storage.It is stored in The application program of reservoir 402 can include one or more modules (diagram is not shown), and each module can be included to knot Close the series of computation machine executable instruction in the simulator detection device of bottom instruction and system information.Further, locate Reason device 401 could be arranged to communicate with memory 402, be held on the simulator detection device for combining bottom instruction and system information Series of computation machine executable instruction in line storage 402.With reference to bottom instruction and the simulator detection device of system information It can also include one or more power supplys 403, one or more wired or wireless network interfaces 404, one or one Individual above input/output interface 405, one or more keyboards 406.
Specifically in the present embodiment, memory is included with reference to the simulator detection device of bottom instruction and system information, And one or more program, one of them or more than one program storage is in memory, and one or one Individual procedure above can include one or more modules, and each module can include believing combining bottom instruction and system Series of computation machine executable instruction in the simulator detection device of breath, and be configured to by one or more than one processing Device performs this or more than one program bag contains for carrying out following computer executable instructions:
According to the relevant information of application program to be detected, the application program to be detected is run;
During the application program to be detected is run, corresponding feedback letter is obtained by sending bottom code instruction Breath, and the system information of the operating system where the application program to be detected is obtained, wherein, in the bottom code instruction extremely It is few to include being used to obtain the instruction of the subregion state information of flash memory;
If do not include predetermined information in the feedback information and/or the system information, it is determined that it is described it is to be detected should Run with program in simulator.
Alternatively, the executable instruction when executed, can also make the processor:
If the device identification of the terminal device where not including the application program to be detected in the system information, And/or the system information includes simulator possessed relevant information, it is determined that the application program to be detected is being simulated Run in device.
Alternatively, the executable instruction when executed, can also make the processor:
Also include the instruction of cpu instruction concentration and/or the instruction for obtaining caching mechanism in the bottom code instruction;
If do not include predetermined information in the feedback information, it is determined that the application program to be detected is in simulator Middle operation, including:
If do not include one or more of information in the feedback information, it is determined that the application program to be detected exists Run in simulator:The relevant information of the subregion state information of the flash memory, CPU information and caching mechanism.
Alternatively, the executable instruction when executed, can also make the processor:
Obtain in the operating system /proc/version files;
The system kernel version information included in described/proc/version files is read as the system information.
Alternatively, the simulator possessed relevant information include by call perform adb get-serialno or Person adb devices are scanned for, the information in the search result of output.
The embodiment of the present application provides the simulator detection device of a kind of combination bottom instruction and system information, is treated by basis The relevant information of application program is detected, runs application program to be detected, during application program to be detected is run, passes through hair Send bottom code instruction to obtain corresponding feedback information, and obtain the system letter of the operating system where application program to be detected Breath, wherein, the instruction for the subregion state information for being used to obtain flash memory is comprised at least in bottom code instruction, if the feedback information And/or do not include predetermined information in the system information, it is determined that application program to be detected is run in simulator, so, is passed through Where bottom code instruction and/or application program to be detected including the instruction of the subregion state information for obtaining flash memory Operating system system information, you can judge whether application program to be detected is run in simulator so that simulator detect Process is simple and easy, and improves the information security of the user using corresponding application programs.
In the 1990s, the improvement for a technology can clearly distinguish be on hardware improvement (for example, Improvement to circuit structures such as diode, transistor, switches) or software on improvement (improvement for method flow).So And as the development of technology, the improvement of current many method flows can be considered as directly improving for hardware circuit. Designer nearly all obtains corresponding hardware circuit by the way that improved method flow is programmed into hardware circuit.Cause This, it cannot be said that the improvement of a method flow cannot be realized with hardware entities module.For example, PLD (Programmable Logic Device, PLD) (such as field programmable gate array (Field Programmable Gate Array, FPGA)) it is exactly such a integrated circuit, its logic function is determined by user to device programming.By designer Voluntarily programming comes a digital display circuit " integrated " on a piece of PLD, without asking chip maker to design and make Special IC chip.Moreover, nowadays, substitution manually makes IC chip, this programming is also used instead mostly " patrols Volume compiler (logic compiler) " software realizes that software compiler used is similar when it writes with program development, And the source code before compiling also write by handy specific programming language, this is referred to as hardware description language (Hardware Description Language, HDL), and HDL is also not only a kind of, but have many kinds, such as ABEL (Advanced Boolean Expression Language)、AHDL(Altera Hardware Description Language)、Confluence、CUPL(Cornell University Programming Language)、HDCal、JHDL (Java Hardware Description Language)、Lava、Lola、MyHDL、PALASM、RHDL(Ruby Hardware Description Language) etc., VHDL (Very-High-Speed are most generally used at present Integrated Circuit Hardware Description Language) and Verilog.Those skilled in the art also should This understands, it is only necessary to method flow slightly programming in logic and is programmed into integrated circuit with above-mentioned several hardware description languages, Can is readily available the hardware circuit for realizing the logical method flow.
Controller can be implemented in any suitable manner, for example, controller can take such as microprocessor or processing Device and storage can by the computer of the computer readable program code (such as software or firmware) of (micro-) computing device Read medium, gate, switch, application specific integrated circuit (Application Specific Integrated Circuit, ASIC), the form of programmable logic controller (PLC) and embedded microcontroller, the example of controller include but is not limited to following microcontroller Device:ARC 625D, Atmel AT91SAM, Microchip PIC18F26K20 and Silicone Labs C8051F320, are deposited Memory controller is also implemented as a part for the control logic of memory.It is also known in the art that except with Pure computer readable program code mode realized beyond controller, completely can be by the way that method and step is carried out into programming in logic to make Controller is obtained in the form of gate, switch, application specific integrated circuit, programmable logic controller (PLC) and embedded microcontroller etc. to come in fact Existing identical function.Therefore this controller is considered a kind of hardware component, and various for realizing to including in it The device of function can also be considered as the structure in hardware component.Or even, can be by for realizing that the device of various functions regards For that not only can be the software module of implementation method but also can be the structure in hardware component.
System, device, module or the unit that above-described embodiment illustrates, it can specifically be realized by computer chip or entity, Or realized by the product with certain function.One kind typically realizes that equipment is computer.Specifically, computer for example may be used Think personal computer, laptop computer, cell phone, camera phone, smart phone, personal digital assistant, media play It is any in device, navigation equipment, electronic mail equipment, game console, tablet PC, wearable device or these equipment The combination of equipment.
For convenience of description, it is divided into various units during description apparatus above with function to describe respectively.Certainly, this is being implemented The function of each unit can be realized in same or multiple softwares and/or hardware during application.
It should be understood by those skilled in the art that, embodiments herein can be provided as method, system or computer program Product.Therefore, the application can use the reality in terms of complete hardware embodiment, complete software embodiment or combination software and hardware Apply the form of example.Moreover, the application can use the computer for wherein including computer usable program code in one or more The computer program production that usable storage medium is implemented on (including but is not limited to magnetic disk storage, CD-ROM, optical memory etc.) The form of product.
The application is with reference to the flow according to the method for the embodiment of the present application, equipment (system) and computer program product Figure and/or block diagram describe.It should be understood that can be by every first-class in computer program instructions implementation process figure and/or block diagram Journey and/or the flow in square frame and flow chart and/or block diagram and/or the combination of square frame.These computer programs can be provided The processors of all-purpose computer, special-purpose computer, Embedded Processor or other programmable data processing devices is instructed to produce A raw machine so that produced by the instruction of computer or the computing device of other programmable data processing devices for real The device for the function of being specified in present one flow of flow chart or one square frame of multiple flows and/or block diagram or multiple square frames.
These computer program instructions, which may be alternatively stored in, can guide computer or other programmable data processing devices with spy Determine in the computer-readable memory that mode works so that the instruction being stored in the computer-readable memory, which produces, to be included referring to Make the manufacture of device, the command device realize in one flow of flow chart or multiple flows and/or one square frame of block diagram or The function of being specified in multiple square frames.
These computer program instructions can be also loaded into computer or other programmable data processing devices so that counted Series of operation steps is performed on calculation machine or other programmable devices to produce computer implemented processing, so as in computer or The instruction performed on other programmable devices is provided for realizing in one flow of flow chart or multiple flows and/or block diagram one The step of function of being specified in individual square frame or multiple square frames.
In a typical configuration, computing device includes one or more processors (CPU), input/output interface, net Network interface and internal memory.
Internal memory may include computer-readable medium in volatile memory, random access memory (RAM) and/or The forms such as Nonvolatile memory, such as read-only storage (ROM) or flash memory (flash RAM).Internal memory is computer-readable medium Example.
Computer-readable medium includes permanent and non-permanent, removable and non-removable media can be by any method Or technology come realize information store.Information can be computer-readable instruction, data structure, the module of program or other data. The example of the storage medium of computer includes, but are not limited to phase transition internal memory (PRAM), static RAM (SRAM), moved State random access memory (DRAM), other kinds of random access memory (RAM), read-only storage (ROM), electric erasable Programmable read only memory (EEPROM), fast flash memory bank or other memory techniques, read-only optical disc read-only storage (CD-ROM), Digital versatile disc (DVD) or other optical storages, magnetic cassette tape, the storage of tape magnetic rigid disk or other magnetic storage apparatus Or any other non-transmission medium, the information that can be accessed by a computing device available for storage.Define, calculate according to herein Machine computer-readable recording medium does not include temporary computer readable media (transitory media), such as data-signal and carrier wave of modulation.
It should also be noted that, term " comprising ", "comprising" or its any other variant are intended to nonexcludability Comprising so that process, method, commodity or equipment including a series of elements not only include those key elements, but also wrapping Include the other element being not expressly set out, or also include for this process, method, commodity or equipment intrinsic want Element.In the absence of more restrictions, the key element limited by sentence "including a ...", it is not excluded that wanted including described Other identical element also be present in the process of element, method, commodity or equipment.
It will be understood by those skilled in the art that embodiments herein can be provided as method, system or computer program product. Therefore, the application can be using the embodiment in terms of complete hardware embodiment, complete software embodiment or combination software and hardware Form.Deposited moreover, the application can use to can use in one or more computers for wherein including computer usable program code The shape for the computer program product that storage media is implemented on (including but is not limited to magnetic disk storage, CD-ROM, optical memory etc.) Formula.
The application can be described in the general context of computer executable instructions, such as program Module.Usually, program module includes performing particular task or realizes routine, program, object, the group of particular abstract data type Part, data structure etc..The application can also be put into practice in a distributed computing environment, in these DCEs, by Task is performed and connected remote processing devices by communication network.In a distributed computing environment, program module can be with In the local and remote computer-readable storage medium including storage device.
Each embodiment in this specification is described by the way of progressive, identical similar portion between each embodiment Divide mutually referring to what each embodiment stressed is the difference with other embodiment.It is real especially for system For applying example, because it is substantially similar to embodiment of the method, so description is fairly simple, related part is referring to embodiment of the method Part explanation.
Embodiments herein is the foregoing is only, is not limited to the application.For those skilled in the art For, the application can have various modifications and variations.All any modifications made within spirit herein and principle, it is equal Replace, improve etc., it should be included within the scope of claims hereof.

Claims (10)

1. a kind of combination bottom instruction and the simulator detection method of system information, it is characterised in that methods described includes:
According to the relevant information of application program to be detected, the application program to be detected is run;
During the application program to be detected is run, corresponding feedback information is obtained by sending bottom code instruction, And the system information of the operating system where the application program to be detected is obtained, wherein, in the bottom code instruction at least Include the instruction of the subregion state information for obtaining flash memory;
If do not include predetermined information in the feedback information and/or the system information, it is determined that described to be detected to apply journey Sequence is run in simulator.
2. according to the method for claim 1, it is characterised in that if not including predetermined letter in the system information Breath, it is determined that the application program to be detected is run in simulator, including:
If the device identification of the terminal device where not including the application program to be detected in the system information, and/or, The system information includes simulator possessed relevant information, it is determined that the application program to be detected is transported in simulator OK.
3. according to the method for claim 1, it is characterised in that also include cpu instruction in the bottom code instruction and concentrate Instruction and/or instruction for obtaining caching mechanism;
If do not include predetermined information in the feedback information, it is determined that the application program to be detected is transported in simulator OK, including:
If do not include one or more of information in the feedback information, it is determined that the application program to be detected is being simulated Run in device:The relevant information of the subregion state information of the flash memory, CPU information and caching mechanism.
4. according to the method for claim 2, it is characterised in that the operation obtained where the application program to be detected The system information of system, including:
Obtain in the operating system /proc/version files;
The system kernel version information included in described/proc/version files is read as the system information.
5. according to the method for claim 2, it is characterised in that the simulator possessed relevant information includes passing through Execution adb get-serialno or adb devices is called to scan for, the information in the search result of output.
6. a kind of combination bottom instruction and the simulator detection means of system information, it is characterised in that described device includes:
Program runs module, for the relevant information according to application program to be detected, runs the application program to be detected;
Data obtaining module, for during the application program to be detected is run, being obtained by sending bottom code instruction Corresponding feedback information is taken, and obtains the system information of the operating system where the application program to be detected, wherein, the bottom The instruction for the subregion state information for being used to obtain flash memory is comprised at least in layer identification code instruction;
Determining module, if for not including predetermined information in the feedback information and/or the system information, it is determined that described Application program to be detected is run in simulator.
7. device according to claim 6, it is characterised in that the determining module, if in the system information Do not include the device identification of the terminal device where the application program to be detected, and/or, the system information includes simulation Device possessed relevant information, it is determined that the application program to be detected is run in simulator.
8. device according to claim 6, it is characterised in that also include cpu instruction in the bottom code instruction and concentrate Instruction and/or instruction for obtaining caching mechanism;
The determining module, if for not including one or more of information in the feedback information, it is determined that described to treat Detection application program is run in simulator:Subregion state information, the CPU information letter related to caching mechanism of the flash memory Breath.
9. device according to claim 7, it is characterised in that described information acquisition module, including:
File obtaining unit, for obtain in the operating system /proc/version files;
Information acquisition unit, for reading the system kernel version information included in described/proc/version files as institute State system information.
10. device according to claim 7, it is characterised in that the simulator possessed relevant information includes logical Cross calling execution adb get-serialno or adb devices to scan for, the information in the search result of output.
CN201710922740.4A 2017-09-30 2017-09-30 With reference to bottom instruction and the simulator detection method and device of system information Pending CN107741907A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201710922740.4A CN107741907A (en) 2017-09-30 2017-09-30 With reference to bottom instruction and the simulator detection method and device of system information

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201710922740.4A CN107741907A (en) 2017-09-30 2017-09-30 With reference to bottom instruction and the simulator detection method and device of system information

Publications (1)

Publication Number Publication Date
CN107741907A true CN107741907A (en) 2018-02-27

Family

ID=61236640

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201710922740.4A Pending CN107741907A (en) 2017-09-30 2017-09-30 With reference to bottom instruction and the simulator detection method and device of system information

Country Status (1)

Country Link
CN (1) CN107741907A (en)

Cited By (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110147329A (en) * 2019-05-24 2019-08-20 武汉瓯越网视有限公司 A kind of method, apparatus and terminal of dynamic detection simulator
CN111382416A (en) * 2018-12-27 2020-07-07 北京右划网络科技有限公司 Application program operation identification method and device, terminal equipment and storage medium
CN112733141A (en) * 2020-12-30 2021-04-30 五八有限公司 Information processing method and device
CN114297647A (en) * 2021-12-24 2022-04-08 海光信息技术股份有限公司 Program security detection method and related device
CN117614877A (en) * 2023-11-27 2024-02-27 中国电子科技集团公司第十五研究所 Network security detection system

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104079571A (en) * 2014-06-27 2014-10-01 广州华多网络科技有限公司 Method and device for recognizing Android simulator
CN106201872A (en) * 2016-07-05 2016-12-07 北京鼎源科技有限公司 A kind of running environment detection method of android system
CN106648835A (en) * 2016-12-26 2017-05-10 武汉斗鱼网络科技有限公司 Method and system for detecting running of Android application program in Android simulator
CN106815058A (en) * 2016-12-08 2017-06-09 同盾科技有限公司 A kind of recognition methods of simulator and system
CN107102885A (en) * 2017-04-14 2017-08-29 北京洋浦伟业科技发展有限公司 The method and device of Android simulator is detected using ADB modes

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104079571A (en) * 2014-06-27 2014-10-01 广州华多网络科技有限公司 Method and device for recognizing Android simulator
CN106201872A (en) * 2016-07-05 2016-12-07 北京鼎源科技有限公司 A kind of running environment detection method of android system
CN106815058A (en) * 2016-12-08 2017-06-09 同盾科技有限公司 A kind of recognition methods of simulator and system
CN106648835A (en) * 2016-12-26 2017-05-10 武汉斗鱼网络科技有限公司 Method and system for detecting running of Android application program in Android simulator
CN107102885A (en) * 2017-04-14 2017-08-29 北京洋浦伟业科技发展有限公司 The method and device of Android simulator is detected using ADB modes

Non-Patent Citations (3)

* Cited by examiner, † Cited by third party
Title
LQH: "Android区别真机和模拟器的几种方法", 《HTTPS://WWW.JB51.NET/ARTICLE/88548.HTM》 *
作者不详: "基于文件特征的Android模拟器检测", 《HTTPS://WWW.ANQUANKE.COM/POST/ID/85173》 *
大杯具: "android识别模拟器与真机的一些方法", 《HTTPS://BLOG.CSDN.NET/ABCD1115313634/ARTICLE/DETAILS/48784251/》 *

Cited By (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN111382416A (en) * 2018-12-27 2020-07-07 北京右划网络科技有限公司 Application program operation identification method and device, terminal equipment and storage medium
CN111382416B (en) * 2018-12-27 2022-09-30 北京右划网络科技有限公司 Application program operation identification method and device, terminal equipment and storage medium
CN110147329A (en) * 2019-05-24 2019-08-20 武汉瓯越网视有限公司 A kind of method, apparatus and terminal of dynamic detection simulator
CN110147329B (en) * 2019-05-24 2022-06-14 武汉瓯越网视有限公司 Method, device and terminal for dynamically detecting simulator
CN112733141A (en) * 2020-12-30 2021-04-30 五八有限公司 Information processing method and device
CN114297647A (en) * 2021-12-24 2022-04-08 海光信息技术股份有限公司 Program security detection method and related device
CN117614877A (en) * 2023-11-27 2024-02-27 中国电子科技集团公司第十五研究所 Network security detection system

Similar Documents

Publication Publication Date Title
CN107741907A (en) With reference to bottom instruction and the simulator detection method and device of system information
CN107808098B (en) Model safety detection method and device and electronic equipment
JP7200661B2 (en) Concurrent vulnerability detection
US10839312B2 (en) Warning filter based on machine learning
US8850581B2 (en) Identification of malware detection signature candidate code
US20130117855A1 (en) Apparatus for automatically inspecting security of applications and method thereof
CN107729749A (en) With reference to system information and the Android simulator detection method and device of ardware feature
US9436449B1 (en) Scenario-based code trimming and code reduction
CN106909498A (en) A kind of java applet injects the method and system of failure
WO2020252529A1 (en) System for automatically detecting software vulnerability
CN103678115B (en) The apparatus and method of the position of source code mistake are detected in mixed mode program
CN110462588A (en) Virtual machine operation tracking
Almeida et al. Testing tools for Android context-aware applications: a systematic mapping
CN110457578A (en) A kind of customer service demand recognition methods and device
CN102402479A (en) Intermediate representation construction for static analysis
CN110532185A (en) Test method, device, electronic equipment and computer readable storage medium
CN107133502A (en) A kind of processing method and processing device of application program
CN107704760A (en) A kind of simulator detection method, device and equipment based on bottom instruction
KR20180129623A (en) Apparatus for statically analyzing assembly code including assoxiated multi files
Huber et al. Analysing the performance of mobile cross-platform development approaches using ui interaction scenarios
US8769498B2 (en) Warning of register and storage area assignment errors
CN107908552A (en) A kind of test method based on link, device and equipment
CN110908882A (en) Performance analysis method and device of application program, terminal equipment and medium
US8954310B2 (en) Automatic designation of equivalent variable values
CN115292196A (en) User interface testing method and device, electronic equipment and readable storage medium

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
RJ01 Rejection of invention patent application after publication
RJ01 Rejection of invention patent application after publication

Application publication date: 20180227