CN107967155A - Method, apparatus, the server of program operation are realized based on Hook shared libraries - Google Patents
Method, apparatus, the server of program operation are realized based on Hook shared libraries Download PDFInfo
- Publication number
- CN107967155A CN107967155A CN201610908886.9A CN201610908886A CN107967155A CN 107967155 A CN107967155 A CN 107967155A CN 201610908886 A CN201610908886 A CN 201610908886A CN 107967155 A CN107967155 A CN 107967155A
- Authority
- CN
- China
- Prior art keywords
- shared library
- function
- shared
- interface
- hook
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Abstract
The invention discloses a kind of method that program operation is realized based on Hook shared libraries, including executable program to search export symbol in interface shared library, to call the interface function in the interface shared library；And the interface function is realized in shared library by Symbolic Links calling and realizes function, to realize corresponding function.The present invention also provides a kind of device and server that program operation is realized based on Hook shared libraries.The present invention based on Hook shared libraries realize program operation method, apparatus and server can not change existing program and (can not restart) when program run dynamic more new procedures, can improve program update efficiency.
Description
Technical field
The present invention relates to a kind of field of computer technology, more particularly to a kind of program operation is realized based on Hook shared libraries
Method, apparatus and server.
Background technology
With advancing for computer and network technologies, more and more programs, which need constantly more to newly arrive, meets user
Demand.
Existing program is operationally the function directly invoked in shared library, and therefore, it need to replace shared library to realize
The renewal of program, and while directly replacing shared library, needs to restart executable program, causes renewal efficiency low.
The content of the invention
In view of this, the present invention provides one kind and is based on not changing existing program and (can not weighing when program is run
Open) dynamic more new procedures, the method that the Hook shared libraries of program renewal efficiency realize program operation can be improved.
The present invention provides a kind of method that program operation is realized based on Hook shared libraries, including executable program is total in interface
Enjoy and export symbol is searched in storehouse, to call the interface function in the interface shared library；And the interface function passes through symbol
Linked Invoke, which is realized in shared library, realizes function, to realize corresponding function.
It is described real based on Hook shared libraries the present invention also provides a kind of device that program operation is realized based on Hook shared libraries
The device of existing program operation includes execution module, interface shared library, realizes shared library；The execution module is used in the interface
Export symbol is searched in shared library, to call the interface function in the interface shared library；The interface shared library is used to pass through
Symbolic Links call described realize in shared library to realize function, to realize corresponding function.
The present invention also provides a kind of server, the server realizes program operation including above-mentioned based on Hook shared libraries
Device.
The present invention based on Hook shared libraries realize program operation method, apparatus and server by being shared positioned at interface
The interface function in storehouse is called positioned at realizing that what can freely be rewritten in shared library realizes function, can not change existing program and can
(not restart) dynamic more new procedures when program is run, program renewal efficiency can be improved.
Above and other objects, features and advantages to allow the present invention can become apparent, preferred embodiment cited below particularly,
And coordinate institute's accompanying drawings, it is described in detail below.
Brief description of the drawings
Fig. 1 shows a kind of structure diagram of user terminal；
Fig. 2 shows a kind of structure diagram of server；
Fig. 3 is the flow chart for the method that program operation is realized based on Hook shared libraries that first embodiment of the invention provides；
Fig. 4 is the flow chart for the method that program operation is realized based on Hook shared libraries that second embodiment of the invention provides；
Fig. 5 is the flow chart for the method that program operation is realized based on Hook shared libraries that third embodiment of the invention provides；
Fig. 6 is the structure chart for acting on behalf of realization device based on Hook API that fourth embodiment of the invention provides；
Fig. 7 is the structure chart for the server that fifth embodiment of the invention provides.
Embodiment
Below in conjunction with the attached drawing in the embodiment of the present invention, the technical solution in the embodiment of the present invention is carried out clear, complete
Site preparation describes, it is clear that described embodiment is only part of the embodiment of the present invention, instead of all the embodiments.It is based on
Embodiment in the present invention, those of ordinary skill in the art are obtained every other without making creative work
Embodiment, belongs to the scope of protection of the invention.
What various embodiments of the present invention were provided realizes the method for program operation based on Hook shared libraries, can be applied to such as Fig. 1
Shown user terminal or server as shown in Figure 2.Wherein, user terminal include PC machine (Personal Computer, it is a
People's computer), all-in-one machine, pocket computer on knee, the computer terminal such as car-mounted terminal, and smart mobile phone, tablet
Computer, E-book reader, MP3 player (Moving Picture Experts Group Audio LayerIII, dynamic
Image expert's compression standard audio aspect 3), MP4 (Moving Picture Experts Group Audio Layer IV, move
State image expert's compression standard audio aspect 4) mobile terminal device such as player.
Fig. 1 shows a kind of structure diagram of user terminal.As shown in Figure 1, as shown in Figure 1, user terminal 10 includes depositing
Reservoir 102, storage control 104, one or more (one is only shown in figure) processors 106, Peripheral Interface 108, radio frequency mould
Block 110, locating module 112, photographing module 114, audio-frequency module 116, screen 118 and key-press module 120.These components pass through
One or more communication bus/signal wire 122 mutually communicates.
It is appreciated that structure shown in Fig. 1 is only to illustrate, user terminal 10 may also include it is more more than shown in Fig. 1 or
Less component, or there is the configuration different from shown in Fig. 1.Each component shown in Fig. 1 can use hardware, software or its
Combination is realized.
Memory 102 can be used for storage software program and module, as in the embodiment of the present invention based on Hook shared libraries
Realize the corresponding programmed instruction/module of method, apparatus of program operation, processor 106 is stored in memory 102 by operation
Software program and module, so as to perform various functions application and data processing, that is, realize and above-mentioned shared based on Hook
The method that program operation is realized in storehouse.
Memory 102 may include high speed random access memory, may also include nonvolatile memory, such as one or more magnetic
Property storage device, flash memory or other non-volatile solid state memories.In some instances, memory 102 can further comprise
Relative to the remotely located memory of processor 106, these remote memories can pass through network connection to user terminal 10.On
The example for stating network includes but not limited to internet, intranet, LAN, mobile radio communication and combinations thereof.Processor 106
And access of other possible components to memory 102 can carry out under the control of storage control 104.
Various input/output devices are coupled to CPU and memory 102 by Peripheral Interface 108.The operation of processor 106 is deposited
Various softwares in reservoir 102, instruction are to perform the various functions of user terminal 10 and carry out data processing.
In certain embodiments, Peripheral Interface 108, processor 106 and storage control 104 can be in one single chips
Realize.In some other example, they can be realized by independent chip respectively.
Radio-frequency module 110 is used to receiving and sending electromagnetic wave, realizes the mutual conversion of electromagnetic wave and electric signal, so that with
Communication network or other equipment are communicated.Radio-frequency module 110 may include the various existing electricity for being used to perform these functions
Circuit component, for example, antenna, RF transceiver, digital signal processor, encryption/deciphering chip, subscriber identity module (SIM) card,
Memory etc..Radio-frequency module 110 can be communicated or led to various networks such as internet, intranet, wireless network
Wireless network is crossed to be communicated with other equipment.Above-mentioned wireless network may include cellular telephone networks, WLAN or
Metropolitan Area Network (MAN).Above-mentioned wireless network can use various communication standards, agreement and technology, and including but not limited to the whole world is mobile logical
Letter system (Global System for Mobile Communication, GSM), enhanced mobile communication technology
(Enhanced Data GSM Environment, EDGE), Wideband CDMA Technology (wideband code division
Multiple access, W-CDMA), Code Division Multiple Access (Code division access, CDMA), time division multiple access technology
(time division multiple access, TDMA), bluetooth, adopting wireless fidelity technology (Wireless, Fidel ity, Wi-
Fi) (such as American Institute of Electrical and Electronics Engineers's standard IEEE 802.11a, IEEE 802.11b, IEEE802.11g and/or
IEEE 802.11n), the networking telephone (Voice over internet protocal, VoIP), worldwide interoperability for microwave accesses
(Worldwide Interoperabil ity for Microwave Access, Wi-Max), other be used for mail, Instant Messenger
The agreement of news and short message, and any other suitable communications protocol, or even may include that those are not developed currently yet
Agreement.
Locating module 112 is used for the current location for obtaining user terminal 10.The example of locating module 112 includes but not limited to
GPS (GPS), the location technology based on WLAN or mobile radio communication.
Photographing module 114 is used to shoot photo or video.The photo or video of shooting can be stored to memory 102
It is interior, and can be sent by radio-frequency module 110.
Audio-frequency module 116 provides a user audio interface, it may include one or more microphones, one or more raises
Sound device and voicefrequency circuit.Voicefrequency circuit receives voice data at Peripheral Interface 108, and voice data is converted to power information
Power information is transmitted to loudspeaker afterwards.Power information is converted to the sound wave that human ear can hear by loudspeaker.Voicefrequency circuit is also from Mike
Power information is received at wind, converts electrical signals to voice data, and by data transmission in network telephony into Peripheral Interface 108 with into traveling
The processing of one step.Voice data can obtain at memory 102 or by radio-frequency module 110.In addition, voice data also may be used
To store into memory 102 or be transmitted by radio-frequency module 110.In some instances, audio-frequency module 116 can also wrap
Include an earphone and broadcast hole, for providing audio interface to earphone or other equipment.
Screen 118 provides an output interface between user terminal 10 and user.Specifically, screen 118 is shown to user
Show that video exports, the content of these videos output may include word, figure, video and its any combination.Some output the result is that
Corresponding to some user interface objects.It should be understood that screen 118 can also include Touch Screen.Touch Screen is whole in user
One output and inputting interface are provided at the same time between end 10 and user.Except showing video output to user, Touch Screen also connects
The input of user, such as the gesture operation such as the click of user, slip are received, so that input of the user interface object to these users is done
Go out response.It can be based on resistance-type, condenser type or any other possible touch control detection skill to detect technology input by user
Art.The instantiation of Touch Screen display unit includes but is not limited to liquid crystal display or light emitting polymer displays.
Key-press module 120 equally provides user's interface inputted to user terminal 10, and user can be by pressing not
Same button is so that user terminal 10 performs different functions.
Fig. 2 shows a kind of structure diagram of server.As shown in Fig. 2, server includes：Memory 201, processor
202 and mixed-media network modules mixed-media 203.
It is appreciated that the structure shown in Fig. 2 is only to illustrate, server may also include more more or less than shown in Fig. 2
Component, or there is the configuration different from shown in Fig. 2.Each component shown in Fig. 2 can use hardware, software or its combination
Realize.
Memory 201 can be used for storage software program and module, as in the embodiment of the present invention based on Hook shared libraries
Realize the corresponding programmed instruction/module of method, apparatus of program operation, processor 202 is stored in memory 201 by operation
Software program and module, so as to perform various functions application and data processing, that is, realize the base in the embodiment of the present invention
In the method that Hook shared libraries realize program operation.Memory 201 may include high speed random access memory, may also include non-volatile
Memory, such as one or more magnetic storage device, flash memory or other non-volatile solid state memories.In some examples
In, memory 201 can further comprise leading to relative to the remotely located memory of processor 202, these remote memories
Network connection is crossed to server.Further, above-mentioned software program and module may also include：Operating system 221 and service
Module 222.Wherein operating system 221, may be, for example, LINUX, UNIX, WINDOWS, it may include various for management system times
Be engaged in (such as memory management, storage device control, power management etc.) component software and/or driving, and can with various hardware or
Component software mutually communicates, so as to provide the running environment of other software component.Service module 222 operates in operating system 221
On the basis of, and monitored by the network service of operating system 221 come the request of automatic network, corresponding data are completed according to request
Processing, and handling result is returned to client.That is, service module 222 is used to provide network service to client.
Mixed-media network modules mixed-media 203 is used to receiving and sending network signal.Above-mentioned network signal may include wireless signal or have
Line signal.In an example, above-mentioned network signal is cable network signal.At this time, mixed-media network modules mixed-media 203 may include processor,
The elements such as random access memory, converter, crystal oscillator.
First embodiment
Fig. 3 is the flow chart for the method that program operation is realized based on Hook shared libraries that first embodiment of the invention provides.
As shown in figure 3, the method for realizing program operation based on Hook shared libraries includes the following steps：
Step S31：Executable program searches export symbol in interface shared library, with the interface in calling interface shared library
Function；And
Step S32：Interface function is realized in shared library by Symbolic Links calling realizes function, to realize corresponding work(
Energy.
Wherein, Symbolic Links are called soft link, it is a kind of special file, this file contains another file
Pathname.
Wherein, realize that function can be self-defined by business, that is to say, that realize that the function of function can also be according to business certainly
Definition.
It is preferably based on Hook shared libraries and realizes that the method for program operation can also include：Function will be realized after renewal
Compiling is to shared library is realized, so that interface function can be called after updating by Symbolic Links realizes function.
The present invention's realizes that the method for program operation passes through the interface function positioned at interface shared library based on Hook shared libraries
Call positioned at realizing that what can freely be rewritten in shared library realizes function, existing program can not be changed and can be run in program
When (do not restart) dynamic more new procedures, can improve program renewal efficiency.
Second embodiment
Fig. 4 is the flow chart for the method that program operation is realized based on Hook shared libraries that second embodiment of the invention provides.
As shown in figure 4, the method for realizing program operation based on Hook shared libraries includes the following steps：
Step S41：Executable program searches export symbol in interface shared library, with the interface in calling interface shared library
Function；
Step S42：Monitoring realizes whether shared library has loaded；
If realizing, shared library has loaded, and enters step S43：Judgement realizes whether shared library is updated；
If realizing, shared library is updated, and enters step S44：Shared library is realized in loading；
Step S45：Calling, which is realized in shared library, realizes function；
If realizing, shared library is not updated, is directly entered step S45：Calling, which is realized in shared library, realizes function；
If realizing, shared library does not load, enters step S44：Shared library is realized in loading.
It is preferably based on Hook shared libraries and realizes that the method for program operation can also include：Function will be realized after renewal
Compiling is to shared library is realized, so that interface function can be called after updating by Symbolic Links realizes function.
The present invention's realizes that the method for program operation passes through the interface function positioned at interface shared library based on Hook shared libraries
Calling is located at the function of realizing realized and can freely rewritten in shared library, and automatic loading realization is shared when realizing shared library renewal
Storehouse, with call it is new realize function, so as to fulfill not changing existing program and (can not restart) when program run dynamically
More new procedures, without manual operation, can further improve program renewal efficiency.
3rd embodiment
Fig. 5 is the flow chart for the method that program operation is realized based on Hook shared libraries that third embodiment of the invention provides.
As shown in figure 5, the method for realizing program operation based on Hook shared libraries includes the following steps：
Step S51：Interface shared library is write into environmental variance；
Step S52：Executable program searches export symbol in interface shared library, with the interface in calling interface shared library
Function；
Wherein, if the corresponding operating system of executable program is Linux, interface shared library can be write LD_
PRELOAD environmental variances.
Step S53：Interface function is realized in shared library by Symbolic Links calling realizes function, to realize corresponding work(
Energy.
It is preferably based on Hook shared libraries and realizes that the method for program operation can also include：Function will be realized after renewal
Compiling is to shared library is realized, so that interface function can be called after updating by Symbolic Links realizes function.
The present invention's realizes that the method for program operation passes through the interface function positioned at interface shared library based on Hook shared libraries
Call positioned at realizing that what can freely be rewritten in shared library realizes function, so as to fulfill existing program is not changed and can be in journey
Dynamic more new procedures (are not restarted) during sort run, without manual operation, program renewal efficiency can be further improved.
Fourth embodiment
Fig. 6 is the structure chart for acting on behalf of realization device based on Hook API that fourth embodiment of the invention provides.Such as Fig. 6 institutes
Show, based on Hook shared libraries realize program operation device 60 include execution module 601, interface shared library 602, realize shared library
603。
Wherein, execution module 601 is used to search export symbol in interface shared library 602, with calling interface shared library 602
In interface function；
Interface shared library 602, which is used to realize in shared library 603 by Symbolic Links calling, realizes function, corresponding to realize
Function.
It is preferably based on Hook shared libraries and realizes that the device of program operation further includes update module, it is used for after renewal
Realize that function is compiled to realizing shared library 603.
Specifically, interface shared library 602 can include the first call unit, the second call unit, the 3rd call unit.The
After one call unit is for when realizing that shared library 603 does not load, shared library 603 to be realized in loading, calling is realized in shared library 603
Realize function.After second call unit is for when realizing that shared library 603 is updated, shared library 603 to be realized in loading, call real
Function is realized in existing shared library 603.3rd call unit is used to realize that shared library 603 loaded and tune when not being updated
Function is realized with realizing in shared library 603.
It is preferably based on Hook shared libraries and realizes that the device of program operation further includes writing module, for interface to be shared
Storehouse 602 writes environmental variance.Wherein, then can be with when the corresponding operating system of executive program in execution module 601 is Linux
Interface shared library 602 is write into LD_PRELOAD environmental variances.
The present invention's realizes the device of program operation based on Hook shared libraries and can not change existing program and can be
Program (does not restart) dynamic more new procedures when running, can improve program renewal efficiency.
5th embodiment
Fig. 7 is the structure chart for the server that fifth embodiment of the invention provides.As shown in fig. 7, server is included such as Fig. 6 institutes
That shows realizes the device 60 of program operation based on Hook shared libraries.Preferably, interface shared library is with realizing that shared library is respectively positioned on clothes
Device of being engaged in is local, certain interface shared library or realizes that shared library can also be located at distal end.The concrete structure of server shown in Fig. 7 is also
Fig. 2 is may be referred to, details are not described herein.
The present invention based on Hook shared libraries realize program operation method, apparatus and server by being shared positioned at interface
The interface function in storehouse is called positioned at realizing that what can freely be rewritten in shared library realizes function, can not change existing program and can
(not restart) dynamic more new procedures when program is run, program renewal efficiency can be improved.
It should be noted that each embodiment in this specification is described by the way of progressive, each embodiment weight
Point explanation is all difference with other embodiment, between each embodiment identical similar part mutually referring to.
For device class embodiment, since it is substantially similar to embodiment of the method, so description is fairly simple, related part ginseng
See the part explanation of embodiment of the method.
It should be noted that herein, relational terms such as first and second and the like are used merely to a reality
Body or operation are distinguished with another entity or operation, are deposited without necessarily requiring or implying between these entities or operation
In any this actual relation or order.Moreover, term " comprising ", "comprising" or its any other variant are intended to
Non-exclusive inclusion, so that process, method, article or device including a series of elements not only will including those
Element, but also including other elements that are not explicitly listed, or further include as this process, method, article or device
Intrinsic key element.In the absence of more restrictions, the key element limited by sentence "including a ...", it is not excluded that
Also there are other identical element in process, method, article or device including key element.
One of ordinary skill in the art will appreciate that hardware can be passed through by realizing all or part of step of above-described embodiment
To complete, relevant hardware can also be instructed to complete by program, program can be stored in a kind of computer-readable storage
In medium, storage medium mentioned above can be read-only storage, disk or CD etc..
More than, only it is presently preferred embodiments of the present invention, not makees limitation in any form to the present invention, although this
Invention is disclosed above with preferred embodiment, but is not limited to the present invention, any person skilled in the art,
Do not depart from the range of technical solution of the present invention, when the technology contents using the disclosure above make a little change or are modified to equivalent
The equivalent embodiment of change, as long as being without departing from technical solution of the present invention content, the technical spirit according to the present invention is real to more than
Any simple modification, equivalent change and modification that example is made is applied, in the range of still falling within technical solution of the present invention.
Claims (10)
- A kind of 1. method that program operation is realized based on Hook shared libraries, it is characterised in that including：Executable program searches export symbol in interface shared library, to call the interface function in the interface shared library；With AndThe interface function is realized in shared library by Symbolic Links calling realizes function, to realize corresponding function.
- 2. the method for program operation is realized based on Hook shared libraries as claimed in claim 1, it is characterised in that the method is also Including：By realizing after renewal, function is compiled to described realizes shared library, so that the interface function can pass through the symbolic link Connect and realize function after calling the renewal.
- 3. the method for program operation is realized based on Hook shared libraries as claimed in claim 1 or 2, it is characterised in that described to connect Mouthful function is called by Symbolic Links to be realized in shared library and realizes function, and to realize corresponding function the step of includes：Monitor and described realize whether shared library has loaded；If described realize that shared library has loaded, judge described to realize whether shared library is updated；If described realize that shared library is updated, load it is described realize shared library after call the reality realized in shared library Existing function；If described realize that shared library is not updated, described realize in shared library is called to realize function；If described realize that shared library does not load, load it is described realize shared library after call described realize in shared library to realize letter Number.
- 4. as claimed in claim 1 or 2 based on Hook shared libraries realize program operation method, it is characterised in that it is described can The corresponding operating system of executive program is Linux；The executable program searches export symbol in interface shared library, to call Further included before the step of interface function in the interface shared library：The interface shared library is write into LD_PRELOAD environmental variances.
- 5. a kind of device that program operation is realized based on Hook shared libraries, it is characterised in that described to be realized based on Hook shared libraries The device of program operation includes execution module, interface shared library, realizes shared library；The execution module, for searching export symbol in the interface shared library, to call in the interface shared library Interface function；The interface shared library is corresponding to realize for calling described realize in shared library to realize function by Symbolic Links Function.
- 6. the device of program operation is realized based on Hook shared libraries as claimed in claim 5, it is characterised in that described to be based on Hook shared libraries realize that the device of program operation further includes：Update module, for function to be compiled to described realizes shared library by realizing after renewal.
- 7. the device that program operation is realized based on Hook shared libraries as described in claim 5 or 6, it is characterised in that described to connect Mouth shared library includes：First call unit, for it is described realize that shared library does not load when load it is described realize shared library after, call the reality Function is realized in existing shared library；Second call unit, for it is described realize that shared library is updated when load it is described realize shared library after, call the reality Function is realized in existing shared library；And3rd call unit, for it is described realize shared library loaded and while not being updated call it is described in realizing shared library Realize function.
- 8. the device that program operation is realized based on Hook shared libraries as described in claim 5 or 6, it is characterised in that the dress Put and further include：Writing module, for the interface shared library to be write environmental variance.
- 9. a kind of server, it is characterised in that the server includes real based on Hook shared libraries described in claim 5 or 6 The device of existing program operation.
- 10. server as claimed in claim 9, it is characterised in that the interface shared library realizes the equal position of shared library with described In the server local.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201610908886.9A CN107967155B (en) | 2016-10-18 | 2016-10-18 | Method, device, server and medium for realizing program operation based on Hook shared library |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201610908886.9A CN107967155B (en) | 2016-10-18 | 2016-10-18 | Method, device, server and medium for realizing program operation based on Hook shared library |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN107967155A true CN107967155A (en) | 2018-04-27 |
| CN107967155B CN107967155B (en) | 2022-01-07 |
Family
ID=61996785
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201610908886.9A Active CN107967155B (en) | 2016-10-18 | 2016-10-18 | Method, device, server and medium for realizing program operation based on Hook shared library |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN107967155B (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN111694747A (en) * | 2020-06-17 | 2020-09-22 | 北京字节跳动网络技术有限公司 | Thread detection method, device, equipment and computer readable medium |
Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US7703081B1 (en) * | 2005-09-22 | 2010-04-20 | Symantec Corporation | Fast system call hooking on x86-64 bit windows XP platforms |
| CN103885808A (en) * | 2014-04-08 | 2014-06-25 | 北京奇虎科技有限公司 | Hotfix processing method and device |
| CN104217164A (en) * | 2014-09-11 | 2014-12-17 | 工业和信息化部电子第五研究所 | Method and device for detecting malicious software of intelligent mobile terminal |
| CN104267956A (en) * | 2014-09-28 | 2015-01-07 | 深圳光启创新技术有限公司 | Method and module for controlling hardware device in operating system |
| CN104504341A (en) * | 2015-01-21 | 2015-04-08 | 联想(北京)有限公司 | Operating system bug repairing method and device |
| CN105956474A (en) * | 2016-05-17 | 2016-09-21 | 武汉虹旭信息技术有限责任公司 | Abnormal behavior detection system of Android platform software |
-
2016
- 2016-10-18 CN CN201610908886.9A patent/CN107967155B/en active Active
Patent Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US7703081B1 (en) * | 2005-09-22 | 2010-04-20 | Symantec Corporation | Fast system call hooking on x86-64 bit windows XP platforms |
| CN103885808A (en) * | 2014-04-08 | 2014-06-25 | 北京奇虎科技有限公司 | Hotfix processing method and device |
| CN104217164A (en) * | 2014-09-11 | 2014-12-17 | 工业和信息化部电子第五研究所 | Method and device for detecting malicious software of intelligent mobile terminal |
| CN104267956A (en) * | 2014-09-28 | 2015-01-07 | 深圳光启创新技术有限公司 | Method and module for controlling hardware device in operating system |
| CN104504341A (en) * | 2015-01-21 | 2015-04-08 | 联想(北京)有限公司 | Operating system bug repairing method and device |
| CN105956474A (en) * | 2016-05-17 | 2016-09-21 | 武汉虹旭信息技术有限责任公司 | Abnormal behavior detection system of Android platform software |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN111694747A (en) * | 2020-06-17 | 2020-09-22 | 北京字节跳动网络技术有限公司 | Thread detection method, device, equipment and computer readable medium |
| CN111694747B (en) * | 2020-06-17 | 2023-03-28 | 抖音视界有限公司 | Thread detection method, device, equipment and computer readable medium |
Also Published As
| Publication number | Publication date |
|---|---|
| CN107967155B (en) | 2022-01-07 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US10959124B2 (en) | Uplink data transmission method, terminal, network side device and system | |
| CN108880867A (en) | A kind of network equipment collecting method and system | |
| CN105760127A (en) | Screen transfer method, screen transfer device and mobile terminal | |
| CN110311704B (en) | Antenna switching method and related product | |
| CN106776036A (en) | A kind of resource allocation methods and device | |
| CN109922539B (en) | Network connection method and related product | |
| CN104731808A (en) | Browser webpage loading method and browser webpage loading device | |
| CN105320616B (en) | External device control method and device | |
| WO2020259446A1 (en) | Communication control method and apparatus, and electronic device | |
| CN106657528A (en) | Incoming call management method and device | |
| KR20150065410A (en) | Access point connection method of electronic apparatus and electronic appparatus thereof | |
| CN104092723A (en) | File downloading method, device and system | |
| CN110574485A (en) | Network connection configuration method and related product | |
| CN105872980B (en) | A kind of method and device scanning wireless network signal | |
| CN106123910A (en) | Step-recording method based on mobile terminal and step count set | |
| CN107608720A (en) | Using the display methods of footmark, device, mobile terminal and storage medium | |
| CN107153576A (en) | The distribution method and terminal device of a kind of memory source | |
| CN113253826B (en) | Control method, device, terminal and storage medium | |
| CN106331258A (en) | Call methods, call apparatus and call system | |
| CN104113620A (en) | Contact list updating method, updating device and user terminal | |
| CN113207115B (en) | Mobile terminal and network searching control method | |
| CN109644078B (en) | Uplink data transmission method, terminal, network side equipment and system | |
| CN106899959B (en) | Method, device, terminal and system for obtaining SIM card information | |
| CN110032430A (en) | Applied program processing method and device, electronic equipment, computer readable storage medium | |
| CN108200636A (en) | Navigation information methods of exhibiting, terminal |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |