CN108776633A - Method, terminal device and the computer readable storage medium of monitoring process operation - Google Patents
Method, terminal device and the computer readable storage medium of monitoring process operation Download PDFInfo
- Publication number
- CN108776633A CN108776633A CN201810496141.5A CN201810496141A CN108776633A CN 108776633 A CN108776633 A CN 108776633A CN 201810496141 A CN201810496141 A CN 201810496141A CN 108776633 A CN108776633 A CN 108776633A
- Authority
- CN
- China
- Prior art keywords
- subprocess
- target
- target process
- monitoring
- thread
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/30—Monitoring
- G06F11/3089—Monitoring arrangements determined by the means or processing involved in sensing the monitored data, e.g. interfaces, connectors, sensors, probes, agents
- G06F11/3093—Configuration details thereof, e.g. installation, enabling, spatial arrangement of the probes
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/46—Multiprogramming arrangements
- G06F9/50—Allocation of resources, e.g. of the central processing unit [CPU]
- G06F9/5005—Allocation of resources, e.g. of the central processing unit [CPU] to service a request
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Software Systems (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Quality & Reliability (AREA)
- Debugging And Monitoring (AREA)
Abstract
The present invention is suitable for resource management techniques field,Provide a kind of method of monitoring process operation,Terminal device and computer readable storage medium,Wherein,A kind of method of monitoring process operation,The subprocess mark created by obtaining target process,Wherein,Subprocess mark carries out target process for marking the target subprocess of interruption monitoring,It is identified as target subprocess according to subprocess and distributes monitoring thread,So that when detecting that target subprocess is prohibited,It generates for forbidding forbidding instructing to target process allocating system resource,Forbid instructing according to this,Forbid to target process allocating system resource,While realizing that target subprocess is monitored subject thread,Target subprocess is monitored by monitoring thread,Form target process,Monitoring step by step between target subprocess and monitoring thread,It improves and the reliability being monitored is run to process.
Description
Technical field
A kind of run the invention belongs to resource management techniques field more particularly to monitoring process method, terminal device and
Computer readable storage medium.
Background technology
As cost of labor is higher and higher, many industries all use intelligent terminal, or using by intelligent terminal and service
The multi-node cluster of device composition cooperates, artificial to replace, and then reduces human cost.
The multi-node cluster that either single intelligent terminal is still made of intelligent terminal and server, it is processed in task
Cheng Zhong, Installed System Memory can execute multiple processes, some processes in the process of implementation, can load many sensitive letters related to user
Breath, for example, province card number, phone number, bank account etc..
In the prior art, the data of process implementation procedure are illegally read in order to prevent, by being supervised to target process
Control is monitored target process for example, creating subprocess.But for terminal node or server in system,
After hacker gets the terminal node either permission of server can by way of terminating or disabling subprocess, to
Shield monitoring of the subprocess to target process.As it can be seen that existing process monitoring scheme has that reliability is low.
Invention content
It can in view of this, an embodiment of the present invention provides method, terminal device and the computers of a kind of operation of monitoring process
Storage medium is read, the reliability being monitored is run to process to improve.
The first aspect of the embodiment of the present invention provides a kind of method of monitoring process operation, including：
Obtain the subprocess mark that target process creates；The subprocess mark is for marking target subprocess, the mesh
Mark subprocess to the target process for carrying out interruption monitoring；
It is identified as the target subprocess according to the subprocess and distributes monitoring thread, the monitoring thread is used for when detection
When being prohibited to the target subprocess, generate for forbidding forbidding instructing to the target process allocating system resource；
If forbidding instructing described in detecting, forbid to the target process allocating system resource.
The second aspect of the embodiment of the present invention provides a kind of terminal device, including memory, processor and is stored in
In the memory and the computer program that can run on the processor, when the processor executes the computer program
Realize following steps：
Obtain the subprocess mark that target process creates；The subprocess mark is for marking target subprocess, the mesh
Mark subprocess to the target process for carrying out interruption monitoring；
It is identified as the target subprocess according to the subprocess and distributes monitoring thread, the monitoring thread is used for when detection
When being prohibited to the target subprocess, generate for forbidding forbidding instructing to the target process allocating system resource；
If forbidding instructing described in detecting, forbid to the target process allocating system resource.
The third aspect of the embodiment of the present invention provides a kind of computer readable storage medium, the computer-readable storage
Media storage has computer program, the computer program to realize following steps when being executed by processor：
Obtain the subprocess mark that target process creates；The subprocess mark is for marking target subprocess, the mesh
Mark subprocess to the target process for carrying out interruption monitoring；
It is identified as the target subprocess according to the subprocess and distributes monitoring thread, the monitoring thread is used for when detection
When being prohibited to the target subprocess, generate for forbidding forbidding instructing to the target process allocating system resource；
If forbidding instructing described in detecting, forbid to the target process allocating system resource.
Implement method, terminal device and the computer-readable storage of a kind of monitoring process operation provided in an embodiment of the present invention
Medium has the advantages that：
The embodiment of the present invention is identified by obtaining the subprocess that target process creates, wherein subprocess is identified for marking
The target subprocess for target process interrupt monitoring is identified as target subprocess according to subprocess and distributes monitoring thread, makes
It obtains when detecting that target subprocess is prohibited, generates for forbidding forbidding instructing to target process allocating system resource, root
Forbid instructing according to this, forbids, to target process allocating system resource, it is same realizing that target subprocess is monitored subject thread
When, target subprocess is monitored by monitoring thread, is formed between target process, target subprocess and monitoring thread step by step
Monitoring improves and runs the reliability being monitored to process.
Description of the drawings
It to describe the technical solutions in the embodiments of the present invention more clearly, below will be to embodiment or description of the prior art
Needed in attached drawing be briefly described, it should be apparent that, the accompanying drawings in the following description be only the present invention some
Embodiment for those of ordinary skill in the art without having to pay creative labor, can also be according to these
Attached drawing obtains other attached drawings.
Fig. 1 is a kind of implementation flow chart of the method for monitoring process operation provided in an embodiment of the present invention；
Fig. 2 is a kind of method specific implementation flow chart for monitoring process operation that another embodiment of the present invention provides；
Fig. 3 is a kind of method S22 specific implementation flow charts for monitoring process operation that another embodiment of the present invention provides；
Fig. 4 is a kind of method S13 specific implementation flow charts for monitoring process operation that another embodiment of the present invention provides；
Fig. 5 is a kind of structure diagram for terminal device that another embodiment of the present invention provides；
Fig. 6 is a kind of schematic diagram for terminal device that another embodiment of the present invention provides.
Specific implementation mode
In order to make the purpose , technical scheme and advantage of the present invention be clearer, with reference to the accompanying drawings and embodiments, right
The present invention is further elaborated.It should be appreciated that the specific embodiments described herein are merely illustrative of the present invention, and
It is not used in the restriction present invention.
The embodiment of the present invention is identified by obtaining the subprocess that target process creates, and subprocess mark is for marking to mesh
Mark process interrupt the target subprocess of monitoring, and being identified as target subprocess according to subprocess distributes monitoring thread so that
When detecting that target subprocess is prohibited, generate for forbidding forbidding instructing to target process allocating system resource, Jin Erjin
Only to target process allocating system resource, forms target subprocess and subject thread is monitored, while target subprocess is by supervising
Control thread is monitored, and realizes dual monitoring to process, is solved existing process monitoring scheme and is asked there are reliability is low
Topic.
In embodiments of the present invention, the executive agent of flow is terminal device or server, wherein terminal device can be with
Including but not limited to：The mobile terminals such as smart mobile phone, laptop, computer, tablet computer.Fig. 1 shows the present invention the
The implementation flow chart of the method for the monitoring process operation that one embodiment provides, details are as follows：
S11：Obtain the subprocess mark that target process creates.
In step s 11, subprocess mark is for marking target subprocess, target subprocess to be used to carry out target process
Interrupt monitoring.
In the present embodiment, target subprocess is created by target process, and creates the same of target subprocess in target process
When, it also generates for marking the subprocess of target subprocess to identify.In practice, in performance objective process, divided by calling
It pitches function fork () and creates target subprocess, and then target process is monitored by the target subprocess.
It should be noted that target subprocess is monitored target process, specifically whether monitoring objective process occurs
Interruption is executed, when target subprocess monitors target process in the process of implementation, has occurred and executes interruption, then is generated for terminating
The command for stopping of target process, wherein command for stopping can be that can not ignore signal, for example, SIGSTOP signals and SIGKILL
Signal.
It is understood that target process during execution, can create multiple subprocess, wherein target into
Journey is the subprocess that override is created in all subprocess, that is, in performance objective process, creates simultaneously performance objective first
Then subprocess creates and executes again other subprocess.
S12：It is identified as the target subprocess according to the subprocess and distributes monitoring thread, the monitoring thread is for working as
When detecting that the target subprocess is prohibited, generate for forbidding forbidding referring to the target process allocating system resource
It enables.
In step s 12, monitoring thread is for the part thread in all threads of performance objective subprocess.Due to
During performance objective subprocess, need according to the implementation progress of target subprocess to be that target subprocess configures corresponding system
Resource, wherein system resource includes：Active thread, running memory etc., therefore, when target process in the process of implementation, it is disabled
System resource, then target process can not be performed.
In the present embodiment, when distributing monitoring thread for target subprocess, by obtaining current all threads called,
It is identified further according to subprocess, monitoring thread is determined from all threads called.
It should be noted that during performance objective process, target subprocess can be by multiple threads by simultaneously
It executes, execution route one of of the monitoring process as target subprocess.Monitoring thread is judging whether target subprocess is prohibited
When, whether the system resource by detection for performance objective subprocess is occupied, and then determines whether target subprocess is banned
Only, specifically, if target subprocess is performed, and when detecting that the system resource for performance objective subprocess is occupied,
It can then determine that target subprocess is not prohibited；If target subprocess is performed, and is worked as and detected for performance objective subprocess
System resource it is unoccupied when, then can determine that target subprocess is prohibited.
It is understood that during target subprocess is performed, when detecting that target subprocess is prohibited, then
It can determine that target subprocess can not be monitored the implementation procedure of target process, by generating for forbidding to target process
Allocating system resource is forbidden instructing, and can make target process during being performed, because can not calling system resource due to by
It terminates and executes.
S13：If forbidding instructing described in detecting, forbid to the target process allocating system resource.
In step s 13, forbid, to the target process allocating system resource, can specifically include：Forbid to target into
Journey configures running memory and/or active thread.
In the present embodiment, instruction is forbidden to be generated by monitoring thread, when monitoring thread detects that target subprocess is prohibited
When, you can it determines that target subprocess can not be monitored target process, forbids instructing by generating, and according to forbidding instructing,
Forbid to target process allocating system resource, and then terminate the execution of target process, avoid target subprocess and/or target into
Journey is interrupted in the process of implementation, caused by leakage of information the phenomenon that.
Above as can be seen that a kind of method of monitoring process provided in an embodiment of the present invention operation, by obtain target into
The subprocess mark that journey creates, wherein subprocess mark carries out target process for marking the target subprocess of interruption monitoring,
It is identified as target subprocess according to subprocess and distributes monitoring thread so that when detecting that target subprocess is prohibited, generates and use
In forbidding forbidding instructing to target process allocating system resource, forbid instructing according to this, forbids configuring system to target process
Resource, while realizing that target subprocess is monitored subject thread, target subprocess is monitored by monitoring thread, is formed
Monitoring step by step between target process, target subprocess and monitoring thread improves and runs the reliability being monitored to process.
Fig. 2 shows the specific implementation flows for the method that a kind of monitoring process that second embodiment of the invention provides is run
Figure.It is shown in Figure 2, relative to embodiment described in Fig. 1, also wrapped in a kind of method of monitoring process operation provided in this embodiment
S21 and S22 are included, specific details are as follows：
Further, it is also wrapped before obtaining the subprocess mark that target process creates as another embodiment of the present invention
It includes：
S21：If detecting the preset instructions for performance objective process, sent to the target process for creating son
The control instruction of process, so that the target process creates target subprocess according to the control instruction.
S22：Start the target subprocess, with when detecting the interrupt instruction for interrupting the target process, eventually
The only target process.
In practice, after server is by hacker attacks, and hacker gets permission, by the way that debugger is adhered to Mr. Yu
In the process of one node, and dynamic debugging is carried out to the node, it, should to obtain to check the process implementation procedure on the node
Encryption information on node is for example, transaction key, accidental enciphering rule etc..
The execution of forced interruption target process is needed during due to dynamic modulation, in order to avoid being held on node
Capable target process leakage of information caused by dynamic debugging, in performance objective process, by creating target subprocess and opening
It moves the target subprocess and interruption monitoring is carried out to target process, and then when detecting that target process interrupts, it may be determined that target
The risk of process existence information leakage, by when detecting the interrupt instruction for interrupt targets process, terminating target process,
To avoid target process existence information from leaking.
It should be noted that the execution cycle synchronisation in the execution period and target process of target subprocess, works as target process
At the end of execution, target subprocess also terminates therewith.
Fig. 3 shows the specific implementation stream of the method S22 for monitoring process operation that another embodiment of the present invention provides a kind of
Cheng Tu.It is shown in Figure 3, relative to embodiment described in Fig. 2, in a kind of method of monitoring process operation provided in this embodiment
S22 includes S221, S222 and S223, and specific details are as follows：
S221：If detecting that the target subprocess creates to complete, start the target subprocess.
S222：If the target subprocess, which detects in the implementation procedure of the target process, is inserted into breakpoint, to institute
It states breakpoint to be parsed, to obtain break-poing instruction.
S223：If the break-poing instruction is INT3 break-poing instructions, the target subprocess generates command for stopping, to terminate
The target process.
In the present embodiment, before target subprocess is created, can be passed through by pre-establishing the mark of target subprocess
Obtain current task list in all processes logo collection, then in identification marking set with the presence or absence of pre-establish target into
The mark of journey, and then can determine whether target subprocess is created completion.
In practice, after the terminal node or server in hacker attacks system, the first terminal node into system
Either also as terminal node or server are configured to steal the default script of user information server attachment debugger,
Wherein, it presets configured with breakpoint and/or data access breakpoint is executed in script, breakpoint and/or data access is executed by calling
Breakpoint, can be during target process be performed, the progress of interrupt targets process, and is being run by obtaining target process
Information data is stolen in information generated in memory, realization.
It still calls data access breakpoint to realize interruption it should be noted that either calling and executing breakpoint, can generate
INT3 break-poing instructions, therefore by being parsed and being judged whether break-poing instruction is INT3 break-poing instructions to breakpoint, can determine
Whether terminal where target process has either been attached to debugger in server namely whether to have determined terminal or server
By hacker attacks, the risk of existence information leakage.
The implementation procedure of target process is monitored by starting target subprocess, in the execution for detecting target process
When being inserted into breakpoint in the process, by being parsed to the breakpoint, and then break-poing instruction is obtained, then by judging the break-poing instruction
Whether be INT3 break-poing instructions, and then can determine whether the breakpoint can cause target process to interrupt, and determine terminal or
Whether server is by hacker attacks, the risk of existence information leakage.
In the present embodiment, by control targe process creation target subprocess, with the implementation procedure to target process into
Row interrupts monitoring, although target process can be terminated by generating interrupt control instruction, and then avoid when target process is interrupted
Leakage of information, but waited in establishment when target subprocess and be prohibited to execute, then the implementation procedure of subject thread can not be supervised
Control, however it remains the risk of leakage of information.It is let out to solve the information caused by target subprocess is creating time and is being prohibited to execute
The problem of leakage, can detect target by the monitoring thread to the distribution of target subprocess for monitoring objective subprocess
It is generated when process is prohibited and forbids instructing, to terminate target process.
Fig. 4 shows the specific implementation stream of the method S13 for monitoring process operation that another embodiment of the present invention provides a kind of
Cheng Tu.It is shown in Figure 4, relative to embodiment described in Fig. 2, institute in a kind of method of monitoring process operation provided in this embodiment
Stating S13 includes：S131~S133, specific details are as follows：
S131：If detecting the predetermined registration operation initialized to the target process, currently all call is obtained
Thread.
S132：It is identified according to the subprocess, executable subprocess is determined in thread from current all call
Thread, to obtain subject thread queue.
S133：Any thread is selected from the subject thread queue as the monitoring thread.
In the present embodiment, monitoring thread is one of the execution route of target process, if monitoring thread detects target
Process is prohibited to execute, then generates for forbidding forbidding instructing to target process allocating system resource.
It, can be by creating multiple subprocess, and by being son it should be noted that target process is during execution
Course allocation execution thread carries out the operation of data processing, wherein subprocess can be performed simultaneously by multiple threads, monitoring
Execution route one of of the process as target subprocess, when target subprocess is prohibited, monitoring thread can be known for holding
The system resource of row subprocess is unoccupied, and then can determine whether subprocess is prohibited.
In practical applications, target subprocess can be the target subprocess in I/O intensive type task, or be intensity
Target subprocess in task, the number of threads of performance objective subprocess can pass through the core number of the device of processing and task
Gross blockage factor determines, can specifically be calculated by the following formula to obtain.
N=Ncpu/ (1-W/C)；
Wherein, N is number of threads, and Ncpu is the core number of the device of processing, can be obtained by directly inquiring operation data；
W/C is the stand-by period and calculates the ratio namely gross blockage factor of time, and 0≤W/C < 1,1-W/C≤1.
It should be noted that gross blockage factor can be carried out by invocation performance analysis tool according to current performing environment
It determines.For example, by calling java.lang.managementAPI interface queryings to be carrying out the number of threads W of process and work as
The preceding number of threads C-W called, and then determine gross blockage factor W/C.
For example, the number of threads W for being carrying out process is 3, the number of threads C-W that can currently call is 3, it is determined that is blocked
Coefficient W/C is 0.5.
In the present embodiment, if target subprocess is the subprocess in intensive task, gross blockage factor W/C is equal to 0,
If target subprocess is the subprocess in I/O intensive type task, gross blockage factor W/C is more than 0.
It should be noted that forbidding instruction for forbidding to target process allocating system resource, when target process is prohibited
After allocating system resource, target process can not be then performed.
In the present embodiment, it is identified by obtaining the subprocess that target process creates, wherein subprocess is identified for marking
The target subprocess for target process interrupt monitoring is identified as target subprocess according to subprocess and distributes monitoring thread, makes
It obtains when detecting that target subprocess is prohibited, generates for forbidding forbidding instructing to target process allocating system resource, root
Forbid instructing according to this, forbids, to target process allocating system resource, it is same realizing that target subprocess is monitored subject thread
When, target subprocess is monitored by monitoring thread, is formed between target process, target subprocess and monitoring thread step by step
Monitoring improves and runs the reliability being monitored to process.
By when detecting the preset instructions for performance objective process, being sent to target process for creating subprocess
Control instruction and start the target subprocess so that target process creates target subprocess according to control instruction, realization is being examined
When measuring the interrupt instruction for interrupt targets process, target process is terminated, and then avoids performance objective process and goes out in the process
The phenomenon that existing leakage of information.
Fig. 5 shows that a kind of structure diagram for terminal device that one embodiment of the invention provides, the terminal device include
Each unit is used to execute each step in the corresponding embodiments of Fig. 2.Referring specifically in the embodiment corresponding to Fig. 2 and Fig. 2
Associated description.For convenience of description, only the parts related to this embodiment are shown.
Referring to Fig. 5, the terminal device 30 includes：Acquiring unit 31, allocation unit 32 and execution unit 33.Specifically
Ground：
Acquiring unit 31, the subprocess mark for obtaining target process establishment.Wherein, the subprocess mark is for marking
Remember target subprocess, the target subprocess to the target process for carrying out interruption monitoring.
Allocation unit 32 distributes monitoring thread, the prison for being identified as the target subprocess according to the subprocess
It controls thread to be used for when detecting that the target subprocess is prohibited, generate for forbidding to target process configuration system money
Forbid instructing in source.
Execution unit 33, if for detect it is described forbid instructing, forbid to the target process allocating system resource.
As a kind of mode in the cards of the present embodiment, terminal device further includes：Transmission unit 301 and start unit
302。
If transmission unit 301 is sent out for detecting the preset instructions for performance objective process to the target process
The control instruction for creating subprocess is sent, so that the target process creates target subprocess according to the control instruction.
Start unit 302, for starting the target subprocess, to detect for interrupting in the target process
When severed finger enables, the target process is terminated.
As a kind of mode in the cards of the present embodiment, start unit 302 is specifically used for, if detecting target
Process creation is completed, then starts the target subprocess；If the target subprocess detects the execution of the target process
It is inserted into breakpoint in journey, then the breakpoint is parsed, to obtain break-poing instruction；Refer to if the break-poing instruction is INT3 breakpoints
It enables, then command for stopping is generated, to terminate the target process.
As a kind of mode in the cards of the present embodiment, allocation unit 32 is specifically used for, if detecting to the target
The predetermined registration operation that process is initialized, then acquisition is currently all calls thread；It is identified according to the subprocess, is worked as from described
It is preceding it is all call the thread that executable subprocess is determined in thread, to obtain subject thread queue；From the subject thread
Any thread is selected in queue as the monitoring thread.
In the present embodiment, it is identified by obtaining the subprocess that target process creates, wherein subprocess is identified for marking
The target subprocess for target process interrupt monitoring is identified as target subprocess according to subprocess and distributes monitoring thread, makes
It obtains when detecting that target subprocess is prohibited, generates for forbidding forbidding instructing to target process allocating system resource, root
Forbid instructing according to this, forbids, to target process allocating system resource, it is same realizing that target subprocess is monitored subject thread
When, target subprocess is monitored by monitoring thread, is formed between target process, target subprocess and monitoring thread step by step
Monitoring improves and runs the reliability being monitored to process.
By when detecting the preset instructions for performance objective process, being sent to target process for creating subprocess
Control instruction and start the target subprocess so that target process creates target subprocess according to control instruction, realization is being examined
When measuring the interrupt instruction for interrupt targets process, target process is terminated, and then avoids performance objective process and goes out in the process
The phenomenon that existing leakage of information.
Fig. 6 is a kind of schematic diagram for terminal device that another embodiment of the present invention provides.As shown in fig. 6, the embodiment
Terminal device 6 includes：It processor 60, memory 61 and is stored in the memory 61 and can be transported on the processor 60
Capable computer program 62, for example, monitoring process operation program.The processor 60 executes real when the computer program 62
Step in the embodiment of the method for existing above-mentioned each monitoring process operation, such as step shown in Fig. 2.Alternatively, the processor
The function of each unit in above-mentioned each device embodiment, such as module 61 shown in Fig. 6 are realized when the 60 execution computer program 62
To 65 functions.
Illustratively, the computer program 62 can be divided into one or more units, one or more of
Unit is stored in the memory 61, and is executed by the processor 60, to complete the present invention.One or more of lists
Member can complete the series of computation machine program instruction section of specific function, and the instruction segment is for describing the computer journey
Implementation procedure of the sequence 62 in the terminal device 6.For example, the computer program 62 can be divided into transmission unit, open
Moving cell, acquiring unit, allocation unit and execution unit, each unit concrete function are as described above.
The terminal device 6 can be that the calculating such as desktop PC, notebook, palm PC and cloud server are set
It is standby.The terminal device may include, but be not limited only to, processor 60, memory 61.It will be understood by those skilled in the art that Fig. 6
The only example of terminal device 6 does not constitute the restriction to terminal device 6, may include than illustrating more or fewer portions
Part either combines certain components or different components, such as the terminal device can also include input-output equipment, net
Network access device, bus etc..
Alleged processor 60 can be central processing unit (Central Processing Unit, CPU), can also be
Other general processors, digital signal processor (Digital Signal Processor, DSP), application-specific integrated circuit
(Application Specific Integrated Circuit, ASIC), ready-made programmable gate array (Field-
Programmable Gate Array, FPGA) either other programmable logic device, discrete gate or transistor logic,
Discrete hardware components etc..General processor can be microprocessor or the processor can also be any conventional processor
Deng.
The memory 61 can be the internal storage unit of the terminal device 6, such as the hard disk of terminal device 6 or interior
It deposits.The memory 61 can also be to be equipped on the External memory equipment of the terminal device 6, such as the terminal device 6
Plug-in type hard disk, intelligent memory card (Smart Media Card, SMC), secure digital (Secure Digital, SD) card dodge
Deposit card (Flash Card) etc..Further, the memory 61 can also both include the storage inside list of the terminal device 6
Member also includes External memory equipment.The memory 61 is for storing needed for the computer program and the terminal device
Other programs and data.The memory 61 can be also used for temporarily storing the data that has exported or will export.
In addition, each functional unit in each embodiment of the present invention can be integrated in a processing unit, it can also
It is that each unit physically exists alone, it can also be during two or more units be integrated in one unit.Above-mentioned integrated list
The form that hardware had both may be used in member is realized, can also be realized in the form of SFU software functional unit.
If the integrated module/unit be realized in the form of SFU software functional unit and as independent product sale or
In use, can be stored in a computer read/write memory medium.Based on this understanding, the present invention realizes above-mentioned implementation
All or part of flow in example method, can also instruct relevant hardware to complete, the meter by computer program
Calculation machine program can be stored in a computer readable storage medium, the computer program when being executed by processor, it can be achieved that on
The step of stating each embodiment of the method.Wherein, the computer program includes computer program code, the computer program generation
Code can be source code form, object identification code form, executable file or certain intermediate forms etc..The computer-readable medium
May include：Any entity or device, recording medium, USB flash disk, mobile hard disk, magnetic of the computer program code can be carried
Dish, CD, computer storage, read-only memory (ROM, Read-Only Memory), random access memory (RAM,
Random Access Memory), electric carrier signal, telecommunication signal and software distribution medium etc..It should be noted that described
The content that computer-readable medium includes can carry out increasing appropriate according to legislation in jurisdiction and the requirement of patent practice
Subtract, such as in certain jurisdictions, according to legislation and patent practice, computer-readable medium does not include electric carrier signal and electricity
Believe signal.
Embodiment described above is merely illustrative of the technical solution of the present invention, rather than its limitations；Although with reference to aforementioned reality
Applying example, invention is explained in detail, it will be understood by those of ordinary skill in the art that：It still can be to aforementioned each
Technical solution recorded in embodiment is modified or equivalent replacement of some of the technical features；And these are changed
Or replace, the spirit and scope for various embodiments of the present invention technical solution that it does not separate the essence of the corresponding technical solution should all
It is included within protection scope of the present invention.
Claims (10)
1. a kind of method of monitoring process operation, which is characterized in that including：
Obtain the subprocess mark that target process creates；The subprocess mark is for marking target subprocess, target
Process to the target process for carrying out interruption monitoring；
It is identified as the target subprocess according to the subprocess and distributes monitoring thread, the monitoring thread, which is used to work as, detects institute
When stating target subprocess and being prohibited, generate for forbidding forbidding instructing to the target process allocating system resource；
If forbidding instructing described in detecting, forbid to the target process allocating system resource.
2. according to the method described in claim 1, it is characterized in that, the subprocess for obtaining target process establishment identifies it
Before, including：
If detecting the preset instructions for performance objective process, the control for creating subprocess is sent to the target process
System instruction, so that the target process creates target subprocess according to the control instruction.
3. according to the method described in claim 2, it is characterized in that, the method further includes：
Start the target subprocess, when detecting the interrupt instruction for interrupting the target process, to terminate the mesh
Mark process.
4. according to the method described in claim 3, it is characterized in that, described start the target subprocess, including：
If detecting that the target subprocess creates to complete, start the target subprocess；
If the target subprocess, which detects in the implementation procedure of the target process, is inserted into breakpoint, the breakpoint is carried out
Parsing, to obtain break-poing instruction；
If the break-poing instruction is INT3 break-poing instructions, the target subprocess generates command for stopping, to terminate the target
Process.
5. according to the method described in claim 1, it is characterized in that, it is described according to the subprocess be identified as target into
Journey distributes monitoring thread, including：
If detecting the predetermined registration operation initialized to the target process, acquisition is currently all to call thread；
It is identified according to the subprocess, the thread of executable subprocess is determined in thread from current all call, with
Obtain subject thread queue；
Any thread is selected from the subject thread queue as the monitoring thread.
6. a kind of terminal device, which is characterized in that the terminal device includes memory, processor and is stored in the storage
In device and the computer program that can run on the processor, the processor are realized as follows when executing the computer program
Step：
Obtain the subprocess mark that target process creates；The subprocess mark is for marking target subprocess, target
Process to the target process for carrying out interruption monitoring；
It is identified as the target subprocess according to the subprocess and distributes monitoring thread, the monitoring thread, which is used to work as, detects institute
When stating target subprocess and being prohibited, generate for forbidding forbidding instructing to the target process allocating system resource；
If forbidding instructing described in detecting, forbid to the target process allocating system resource.
7. the terminal device according to claim 6, which is characterized in that the subprocess mark for obtaining target process and creating
Before knowledge, including：
If detecting the preset instructions for performance objective process, the control for creating subprocess is sent to the target process
System instruction, so that the target process creates target subprocess according to the control instruction.
8. the terminal device according to claim 7, which is characterized in that when the processor executes the computer program
Also realize following steps：
Start the target subprocess, when detecting the interrupt instruction for interrupting the target process, to terminate the mesh
Mark process.
9. the terminal device according to claim 8, which is characterized in that the startup target subprocess, including：
If detecting that the target subprocess creates to complete, start the target subprocess；；
If the target subprocess, which detects in the implementation procedure of the target process, is inserted into breakpoint, the breakpoint is carried out
Parsing, to obtain break-poing instruction；
If the break-poing instruction is INT3 break-poing instructions, command for stopping is generated, to terminate the target process.
10. a kind of computer readable storage medium, the computer-readable recording medium storage has computer program, feature to exist
In when the computer program is executed by processor the step of any one of such as claim 1 to 5 of realization the method.
Priority Applications (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201810496141.5A CN108776633B (en) | 2018-05-22 | 2018-05-22 | Method for monitoring process operation, terminal equipment and computer readable storage medium |
| PCT/CN2018/097120 WO2019223095A1 (en) | 2018-05-22 | 2018-07-25 | Process operation monitoring method, terminal device and computer-readable storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201810496141.5A CN108776633B (en) | 2018-05-22 | 2018-05-22 | Method for monitoring process operation, terminal equipment and computer readable storage medium |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN108776633A true CN108776633A (en) | 2018-11-09 |
| CN108776633B CN108776633B (en) | 2021-07-02 |
Family
ID=64027515
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201810496141.5A Active CN108776633B (en) | 2018-05-22 | 2018-05-22 | Method for monitoring process operation, terminal equipment and computer readable storage medium |
Country Status (2)
| Country | Link |
|---|---|
| CN (1) | CN108776633B (en) |
| WO (1) | WO2019223095A1 (en) |
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110941825A (en) * | 2019-12-13 | 2020-03-31 | 支付宝(杭州)信息技术有限公司 | Application monitoring method and device |
| CN111198723A (en) * | 2018-11-19 | 2020-05-26 | 深圳市优必选科技有限公司 | Process injection method, terminal equipment and computer readable storage medium |
| CN111381965A (en) * | 2020-03-03 | 2020-07-07 | 百度在线网络技术（北京）有限公司 | Method and apparatus for processing requests |
Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102436404A (en) * | 2011-08-24 | 2012-05-02 | 苏州阔地网络科技有限公司 | Daemon implementing method |
| CN103246589A (en) * | 2012-02-03 | 2013-08-14 | 京信通信系统（中国）有限公司 | Multithread monitoring method and device |
| CN103383689A (en) * | 2012-05-03 | 2013-11-06 | 阿里巴巴集团控股有限公司 | Service process fault detection method, device and service node |
| CN103440189A (en) * | 2013-08-13 | 2013-12-11 | 江苏华大天益电力科技有限公司 | Software deadlock prevention method based on forced process running control |
| CN104156298A (en) * | 2014-08-19 | 2014-11-19 | 腾讯科技（深圳）有限公司 | Application monitoring method and device |
| CN104932965A (en) * | 2014-03-18 | 2015-09-23 | 北京奇虎科技有限公司 | Object real-time monitoring method and device |
| CN106330523A (en) * | 2015-07-03 | 2017-01-11 | 中国移动通信集团广西有限公司 | Cluster server disaster recovery system and method, and server node |
| US20170132102A1 (en) * | 2015-11-06 | 2017-05-11 | Fujitsu Limited | Computer readable non-transitory recording medium storing pseudo failure generation program, generation method, and generation apparatus |
Family Cites Families (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20060136916A1 (en) * | 2004-12-17 | 2006-06-22 | Rowland John R | Method and apparatus for transaction performance and availability management based on program component monitor plugins and transaction performance monitors |
| CN100543683C (en) * | 2006-12-26 | 2009-09-23 | 华为技术有限公司 | The method and system that process is monitored |
| CN105574406A (en) * | 2015-12-23 | 2016-05-11 | 北京奇虎科技有限公司 | Progress monitoring method and device |
-
2018
- 2018-05-22 CN CN201810496141.5A patent/CN108776633B/en active Active
- 2018-07-25 WO PCT/CN2018/097120 patent/WO2019223095A1/en active Application Filing
Patent Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102436404A (en) * | 2011-08-24 | 2012-05-02 | 苏州阔地网络科技有限公司 | Daemon implementing method |
| CN103246589A (en) * | 2012-02-03 | 2013-08-14 | 京信通信系统（中国）有限公司 | Multithread monitoring method and device |
| CN103383689A (en) * | 2012-05-03 | 2013-11-06 | 阿里巴巴集团控股有限公司 | Service process fault detection method, device and service node |
| CN103440189A (en) * | 2013-08-13 | 2013-12-11 | 江苏华大天益电力科技有限公司 | Software deadlock prevention method based on forced process running control |
| CN104932965A (en) * | 2014-03-18 | 2015-09-23 | 北京奇虎科技有限公司 | Object real-time monitoring method and device |
| CN104156298A (en) * | 2014-08-19 | 2014-11-19 | 腾讯科技（深圳）有限公司 | Application monitoring method and device |
| CN106330523A (en) * | 2015-07-03 | 2017-01-11 | 中国移动通信集团广西有限公司 | Cluster server disaster recovery system and method, and server node |
| US20170132102A1 (en) * | 2015-11-06 | 2017-05-11 | Fujitsu Limited | Computer readable non-transitory recording medium storing pseudo failure generation program, generation method, and generation apparatus |
Non-Patent Citations (1)
| Title |
|---|
| 南理勇: "《提高可移动存储设备管理系统安全运行的方案》", 《微型机与应用》 * |
Cited By (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN111198723A (en) * | 2018-11-19 | 2020-05-26 | 深圳市优必选科技有限公司 | Process injection method, terminal equipment and computer readable storage medium |
| CN110941825A (en) * | 2019-12-13 | 2020-03-31 | 支付宝(杭州)信息技术有限公司 | Application monitoring method and device |
| CN110941825B (en) * | 2019-12-13 | 2022-05-27 | 支付宝(杭州)信息技术有限公司 | Application monitoring method and device |
| CN111381965A (en) * | 2020-03-03 | 2020-07-07 | 百度在线网络技术（北京）有限公司 | Method and apparatus for processing requests |
| CN111381965B (en) * | 2020-03-03 | 2023-01-31 | 百度在线网络技术（北京）有限公司 | Method and apparatus for processing requests |
Also Published As
| Publication number | Publication date |
|---|---|
| WO2019223095A1 (en) | 2019-11-28 |
| CN108776633B (en) | 2021-07-02 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US9104480B2 (en) | Monitoring and managing memory thresholds for application request threads | |
| CN108776633A (en) | Method, terminal device and the computer readable storage medium of monitoring process operation | |
| US20220066896A1 (en) | Method, system, and apparatus for monitoring blockchain smart contract | |
| WO2017049893A1 (en) | Application program testing method, testing apparatus, and mobile terminal | |
| CN107608724A (en) | A kind of method, terminal and computer-readable recording medium for managing application program | |
| CN105404559A (en) | Debugging in a data processing apparatus | |
| CN107315633A (en) | Mobile payment means of defence, device and mobile terminal | |
| CN107368735A (en) | One kind applies installation method, mobile terminal and computer-readable recording medium | |
| CN104992116B (en) | Monitoring method based on intent sniffer and system | |
| CN109144834A (en) | Acquisition method and device, the Android system and terminal device of user behavior data | |
| CN107256356A (en) | Pay class application management method, device and mobile terminal | |
| US8744789B2 (en) | Utility meters configured to execute multiple collection agents | |
| CN107292613A (en) | Mobile payment means of defence, device and mobile terminal | |
| Zhou et al. | Stop pulling my rug: Exposing rug pull risks in crypto token to investors | |
| CN112463266A (en) | Execution policy generation method and device, electronic equipment and storage medium | |
| CN107292614A (en) | Pay class application management method, device and mobile terminal | |
| CN112835639A (en) | Hook implementation method, device, equipment, medium and product | |
| CN107315947A (en) | Pay class application management method, device and mobile terminal | |
| CN101617322B (en) | Information processing device, information processing method, and program | |
| CN106502858A (en) | A kind of multiple subsystem power consumption determines method and terminal | |
| US20170235943A1 (en) | Application Access Control Method and Apparatus | |
| CN108710477A (en) | Display methods, mobile terminal and storage medium | |
| CN117272369A (en) | Privacy compliance detection method and device, electronic equipment and storage medium | |
| CN107272989A (en) | Using startup method, device and terminal device | |
| CN110928630A (en) | Activation control method, device and equipment for application program window and storage medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| REG | Reference to a national code |
Ref country code: HK Ref legal event code: DE Ref document number: 1257008 Country of ref document: HK |
|
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |