CN109977667A - The control method and device of smart machine - Google Patents

The control method and device of smart machine Download PDF

Info

Publication number
CN109977667A
CN109977667A CN201711403386.0A CN201711403386A CN109977667A CN 109977667 A CN109977667 A CN 109977667A CN 201711403386 A CN201711403386 A CN 201711403386A CN 109977667 A CN109977667 A CN 109977667A
Authority
CN
China
Prior art keywords
display interface
smart machine
current display
interface
function
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN201711403386.0A
Other languages
Chinese (zh)
Inventor
张冰
徐翰隆
王小丰
肖新光
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Beijing Ahtech Network Safe Technology Ltd
Original Assignee
Beijing Ahtech Network Safe Technology Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Beijing Ahtech Network Safe Technology Ltd filed Critical Beijing Ahtech Network Safe Technology Ltd
Priority to CN201711403386.0A priority Critical patent/CN109977667A/en
Publication of CN109977667A publication Critical patent/CN109977667A/en
Pending legal-status Critical Current

Links

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55Detecting local intrusion or implementing counter-measures
    • G06F21/56Computer malware detection or handling, e.g. anti-virus arrangements
    • G06F21/566Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F8/00Arrangements for software engineering
    • G06F8/60Software deployment
    • G06F8/61Installation
    • G06F8/62Uninstallation

Landscapes

  • Engineering & Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Software Systems (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Health & Medical Sciences (AREA)
  • General Health & Medical Sciences (AREA)
  • Virology (AREA)
  • User Interface Of Digital Computer (AREA)

Abstract

The invention discloses a kind of control method and device of smart machine, wherein method includes: to detect the current display interface of smart machine when the function key of smart machine is triggered;Judge whether current display interface is the corresponding function display interface of function key;If current display interface is not function display interface, stop or unload the corresponding application of current display interface according to user response.This method can stop according to user response or unload the corresponding application of current display interface to improve the safety of equipment to effectively improve the safeguard function of equipment when current display interface is not function display interface.

Description

The control method and device of smart machine
Technical field
The present invention relates to smart machine application Interception Technology field, the in particular to control methods and dress of a kind of smart machine It sets.
Background technique
The end PC (personal computer, personal computer), which is extorted in software set, at present breaks out, and causes very severe Influence, android there are also software is extorted, only by antivirus software carry out feature or packet name investigation.If transported Row extorts software, will cause android device screen screen locking, and the specific password of purchase of only paying can just unlock.
In the related technology, by matching characteristic code when installation new opplication and packet name, or according to application application permission and portion Divide registration information screening virus.
However, although android antivirus software will do it cloud killing in downloading and installation, then notify user whether be Extort software, but once have it is not found extort software by user installation and operation after, the equipment of user can be seriously by prestige The side of body, leads to that effective protection and solution cannot be made, it would be highly desirable to solve when having infected blackmailer's malicious virus.
Summary of the invention
The present invention is directed to solve at least some of the technical problems in related technologies.
For this purpose, can effectively improve equipment an object of the present invention is to provide a kind of control method of smart machine Safeguard function, improve the safety of equipment.
It is another object of the present invention to the control devices for proposing a kind of smart machine.
In order to achieve the above objectives, one aspect of the present invention embodiment proposes a kind of control method of smart machine, including with Lower step: when the function key of smart machine is triggered, the current display interface of the smart machine is detected;Judge described current Whether display interface is the corresponding function display interface of the function key;If the current display interface is not that the function is aobvious Show interface, then stops or unload the corresponding application of the current display interface according to user response.
The control method of the smart machine of the embodiment of the present invention can not be function display interface in current display interface When, stopped according to user response or unload the corresponding application of current display interface, so that effective protection, which has infected, extorts software Smart machine, effectively improve the safeguard function of equipment, improve the safety of equipment.
Further, in one embodiment of the invention, described when the function key of smart machine is triggered, detect institute The current display interface for stating smart machine further comprises: the Home function provided by Hook Function monitor operating system kernel Whether the corresponding interface function of energy key is called, to detect whether Home function key is triggered;It is touched in the Home function key When hair, the current display interface is obtained, to judge whether the current display interface is the interface launcher.
Further, in one embodiment of the invention, stopped according to user response or unloaded described current described Before the corresponding application of display interface, further includes: the prompt information for whether stopping current interface application or unloading sent to user.
Further, in one embodiment of the invention, described to be stopped according to user response or unloaded described current aobvious Show the corresponding application in interface, further comprise: stopping the corresponding application of the current display interface, and improve to the application Permission limit grade.
Further, in one embodiment of the invention, further includes: in dismount failure, forced by system kernel Delete application file folder.
In order to achieve the above objectives, another aspect of the present invention embodiment proposes a kind of control device of smart machine, comprising: Detection module, for detecting the current display interface of the smart machine when the function key of smart machine is triggered;Judge mould Block, for judging whether the current display interface is the corresponding function display interface of the function key;Protection module, for such as Current display interface described in fruit is not the function display interface, then stops or unload current display circle according to user response The corresponding application in face.
The control device of the smart machine of the embodiment of the present invention can not be function display interface in current display interface When, stopped according to user response or unload the corresponding application of current display interface, so that effective protection, which has infected, extorts software Smart machine, effectively improve the safeguard function of equipment, improve the safety of equipment.
Further, in one embodiment of the invention, the detection module, further comprise: detection unit is used for Whether it is called by the corresponding interface function of Home function key that Hook Function monitor operating system kernel provides, with detection Whether Home function key is triggered;Acquiring unit, for obtaining current display circle when the Home function key is triggered Face, to judge whether the current display interface is the interface launcher.
Further, in one embodiment of the invention, stopped according to user response or unloaded described current described Before the corresponding application of display interface, further includes: the prompt information for whether stopping current interface application or unloading sent to user.
Further, in one embodiment of the invention, described to be stopped according to user response or unloaded described current aobvious Show the corresponding application in interface, further comprise: stopping the corresponding application of the current display interface, and improve to the application Permission limit grade.
Further, in one embodiment of the invention, further includes: in dismount failure, forced by system kernel Delete application file folder.
The additional aspect of the present invention and advantage will be set forth in part in the description, and will partially become from the following description Obviously, or practice through the invention is recognized.
Detailed description of the invention
Above-mentioned and/or additional aspect and advantage of the invention will become from the following description of the accompanying drawings of embodiments Obviously and it is readily appreciated that, in which:
Fig. 1 is the flow chart according to the control method of the smart machine of the embodiment of the present invention;
Fig. 2 is the flow chart according to the control method of the smart machine of a specific embodiment of the invention;
Fig. 3 is the structural schematic diagram according to the control device of the smart machine of the embodiment of the present invention.
Specific embodiment
The embodiment of the present invention is described below in detail, examples of the embodiments are shown in the accompanying drawings, wherein from beginning to end Same or similar label indicates same or similar element or element with the same or similar functions.Below with reference to attached The embodiment of figure description is exemplary, it is intended to is used to explain the present invention, and is not considered as limiting the invention.
The control method and device of the smart machine proposed according to embodiments of the present invention are described with reference to the accompanying drawings, first will Describe the control method of the smart machine proposed according to embodiments of the present invention with reference to the accompanying drawings.
Fig. 1 is the flow chart of the control method of the smart machine of the embodiment of the present invention.
As shown in Figure 1, the control method of the smart machine the following steps are included:
In step s101, when the function key of smart machine is triggered, the current display interface of smart machine is detected.
In general, when the function key of smart machine is triggered, system can make corresponding movement, for example, when mobile phone returns When key triggers, system can call automatically return function to return it to previous menu, therefore, be touched in the function key of smart machine When hair, the embodiment of the present invention can detect the current display interface of smart machine.
Further, in one embodiment of the invention, when the function key of smart machine is triggered, detection intelligence is set Standby current display interface further comprises: the Home function key provided by Hook Function monitor operating system kernel is corresponding Interface function whether be called, to detect whether Home function key is triggered;When Home function key is triggered, obtain current Display interface, to judge whether current display interface is the interface launcher.
It is understood that Hook Function is a part of windows messaging treatment mechanism, by setting " hook ", answer All message, event can be filtered system-level with program, access the message that can not be accessed under normal circumstances.Its In, the essence of hook is one section of program to processing system message, is called by system, it is linked into system.
For example, when Home key triggers, Hook Function can monitor the Home function that operating system nucleus provides The function of the Home key triggering of the corresponding interface of key is called, to obtain current display interface, and judges that current interface is not It is the interface launcher.
That is, the embodiment of the present invention can monitor whether Home key is triggered by hook technology.
In step s 102, judge whether current display interface is the corresponding function display interface of function key.
It is understood that some execute the malicious process of malice task, such as virus, worm and Trojan Horse process Deng malicious process can invade operating system, cause the destruction to operating system, and after user runs this program, interface It can be locked, therefore the embodiment of the present invention judges whether current display interface is the corresponding function display interface of function key.
For example, when user is when using android equipment, by fishing website or the trick downloading of malice ad ware And be mounted with to extort software, this extorts software not in the virus base of antivirus software and does not find malice row by registration information For, antivirus software will not warning note, and after user runs this program, interface is locked, can only carry out payment purchase password it The interface for extorting software can be just unlocked afterwards, therefore the embodiment of the present invention judges whether current display interface is that function key is corresponding Function display interface
In step s 103, if current display interface is not function display interface, stop or unload according to user response Carry the corresponding application of current display interface.
It is understood that when the function key of smart machine is triggered, and the current display interface of smart machine is not It is function display interface, the embodiment of the present invention can stop according to user response or unload the corresponding application of current display interface.
For example, when user has pressed Home key, interface is still shown in smart machine interface or one wide Accuse interface, or extort interface etc., it is not system main interface.
Further, in one embodiment of the invention, stopping or unloading current display interface according to user response Before corresponding application, the method for the embodiment of the present invention further include: sent to user and whether stop current interface application or unloading Prompt information.
For example, interface or an advertising circle is still shown in smart machine interface when user has pressed Home key Face, or extort interface etc., the smart machine of the embodiment of the present invention can send whether stop current interface application or unload to user The prompt information of load, so that user determines whether to unload or stop application.
Further, in one embodiment of the invention, stop or unload current display interface pair according to user response The application answered further comprises: stopping the corresponding application of current display interface, and improves the permission limit grade to application.
For example, the embodiment of the present invention can monitor hardware driving, when user's point by hook linux kernel API After hitting Home key, the interface of present uppermost is then taken by hook window api, and whether judge current display interface Early warning is not triggered then, i.e., does not pop up prompt information if it is the interface launcher for the interface launcher;If it is not, intelligence Equipment will pop up again prompt in window top layer, tell that present uppermost is occupied user by malicious application, and can be strong Stop is stopped or unloading.Forcing to stop this in application, Android system can be stopped to the ownership of the application using modification kernel Limit, prevents it to be again started up.
It should be noted that the embodiment of the present invention can with but be not limited to after virus is extorted in infection, monitor hardware driving, Then the protection method for stopping top layer's application by force, is specifically operated by those skilled in the art according to the actual situation, It is not specifically limited herein
Further, in one embodiment of the invention, the method for the embodiment of the present invention further include: in dismount failure When, it is pressed from both sides by system kernel Force Deletion application file.
It is understood that the embodiment of the present invention is answered when unloading malicious application failure by system kernel Force Deletion With file, it is again started up to prevent malicious application.
As shown in Fig. 2, in one particular embodiment of the present invention, the control method of the smart machine of the embodiment of the present invention The step of it is as follows:
First choice, user need to install the application of the embodiment of the present invention on intelligent devices, and start;After closing, the present invention Embodiment can protect blackmailer on backstage, and will not influence the use of user when not infecting.
In step sl, when the user clicks Home key when, trigger this application testing process.
In step s 2, when user clicks home, current interface is obtained, judges whether it is launcher application.If so, S11 is thened follow the steps,;If it is not, executing step S3.
In step s3, if not the interface launcher, retrogressing event is judged, after judging whether current interface intercepts It moves back, if it is not, terminating;If so, thening follow the steps S4.
That is, judging retrogressing event if not the interface launcher, judge whether current interface intercepts retrogressing, Retrogressing event is such as intercepted, and is started in backstage kill other application, is judged to extorting software.
In step s 4, it judges whether there is other normal uses to be forced to terminate, if it is not, terminating, if so, then Execute step S5.
In step s 5, prompting user to exist can be with behavior.
In step s 6, judge whether to intercept by user, if it is not, then terminating, if so, executing S7.
That is, prompting the user whether to stop current interface application or unloading by window api.
In the step s 7, suspicious actions are terminated.
In step s 8, suspicious application permission is modified, prevents it from opening certainly.
That is, stopping as user clicks, force to stop application by kernel api, and modify whole permissions of application, Prevent its self-starting.
In step s 9, user chooses whether to unload, if it is not, then terminating;If so, executing step S10.
In step slo, unloading can apply.
That is, as user clicks unloading.System api forced unloading application is then first passed through, such as finds dismount failure, is led to Cross system kernel Force Deletion application file folder.
In step s 11, exit-entry operation, and terminate.
The control method of the smart machine proposed according to embodiments of the present invention can not be that function is aobvious in current display interface When showing interface, is stopped according to user response or unload the corresponding application of current display interface, and can be found that and position Le Rope software, to prompt the user whether to stop its operation and unloading, so that effective protection has infected the smart machine for extorting software, The safeguard function for effectively improving equipment improves the safety of equipment.
Referring next to the control device for the smart machine that attached drawing description proposes according to embodiments of the present invention.
Fig. 3 is the structural schematic diagram of the control device of the smart machine of the embodiment of the present invention.
As shown in figure 3, the control device 10 of the smart machine includes: detection module 100, judgment module 200 and protection mould Block 300.
Wherein, detection module 100 is used for when the function key of smart machine is triggered, and detects the current display of smart machine Interface.Judgment module 200 is for judging whether current display interface is the corresponding function display interface of function key.Protection module If 300 be not function display interface for current display interface, stop or unload current display interface according to user response Corresponding application.The device 10 of the embodiment of the present invention can be when current display interface be function display interface, according to user Response stops or unloads the corresponding application of current display interface and improves the peace of equipment to effectively improve the safeguard function of equipment Quan Xing.
Further, in one embodiment of the invention, detection module further comprises: detection unit, for passing through Whether the corresponding interface function of Home function key that Hook Function monitor operating system kernel provides is called, to detect Home function Whether energy key is triggered;Acquiring unit, it is current to judge for obtaining current display interface when Home function key is triggered Whether display interface is the interface launcher.
Further, in one embodiment of the invention, stopping or unloading current display interface according to user response Before corresponding application, further includes: the prompt information for whether stopping current interface application or unloading sent to user.
Further, in one embodiment of the invention, stop or unload current display interface pair according to user response The application answered further comprises: stopping the corresponding application of current display interface, and improves the permission limit grade to application.
Further, in one embodiment of the invention, further includes: in dismount failure, forced by system kernel Delete application file folder.
It should be noted that the explanation of the aforementioned control method embodiment to smart machine is also applied for the embodiment Smart machine control device, details are not described herein again.
The control device of the smart machine proposed according to embodiments of the present invention can not be that function is aobvious in current display interface When showing interface, is stopped according to user response or unload the corresponding application of current display interface, and can be found that and position Le Rope software, to prompt the user whether to stop its operation and unloading, so that effective protection has infected the smart machine for extorting software, The safeguard function for effectively improving equipment improves the safety of equipment.
In the description of the present invention, it is to be understood that, term " center ", " longitudinal direction ", " transverse direction ", " length ", " width ", " thickness ", "upper", "lower", "front", "rear", "left", "right", "vertical", "horizontal", "top", "bottom" "inner", "outside", " up time The orientation or positional relationship of the instructions such as needle ", " counterclockwise ", " axial direction ", " radial direction ", " circumferential direction " be orientation based on the figure or Positional relationship is merely for convenience of description of the present invention and simplification of the description, rather than the device or element of indication or suggestion meaning must There must be specific orientation, be constructed and operated in a specific orientation, therefore be not considered as limiting the invention.
In addition, term " first ", " second " are used for descriptive purposes only and cannot be understood as indicating or suggesting relative importance Or implicitly indicate the quantity of indicated technical characteristic.Define " first " as a result, the feature of " second " can be expressed or Implicitly include at least one this feature.In the description of the present invention, the meaning of " plurality " is at least two, such as two, three It is a etc., unless otherwise specifically defined.
In the present invention unless specifically defined or limited otherwise, term " installation ", " connected ", " connection ", " fixation " etc. Term shall be understood in a broad sense, for example, it may be being fixedly connected, may be a detachable connection, or integral;It can be mechanical connect It connects, is also possible to be electrically connected;It can be directly connected, can also can be in two elements indirectly connected through an intermediary The interaction relationship of the connection in portion or two elements, unless otherwise restricted clearly.For those of ordinary skill in the art For, the specific meanings of the above terms in the present invention can be understood according to specific conditions.
In the present invention unless specifically defined or limited otherwise, fisrt feature in the second feature " on " or " down " can be with It is that the first and second features directly contact or the first and second features pass through intermediary mediate contact.Moreover, fisrt feature exists Second feature " on ", " top " and " above " but fisrt feature be directly above or diagonally above the second feature, or be merely representative of First feature horizontal height is higher than second feature.Fisrt feature can be under the second feature " below ", " below " and " below " One feature is directly under or diagonally below the second feature, or is merely representative of first feature horizontal height less than second feature.
In the description of this specification, reference term " one embodiment ", " some embodiments ", " example ", " specifically show The description of example " or " some examples " etc. means specific features, structure, material or spy described in conjunction with this embodiment or example Point is included at least one embodiment or example of the invention.In the present specification, schematic expression of the above terms are not It must be directed to identical embodiment or example.Moreover, particular features, structures, materials, or characteristics described can be in office It can be combined in any suitable manner in one or more embodiment or examples.In addition, without conflicting with each other, the skill of this field Art personnel can tie the feature of different embodiments or examples described in this specification and different embodiments or examples It closes and combines.
Although the embodiments of the present invention has been shown and described above, it is to be understood that above-described embodiment is example Property, it is not considered as limiting the invention, those skilled in the art within the scope of the invention can be to above-mentioned Embodiment is changed, modifies, replacement and variant.

Claims (10)

1. a kind of control method of smart machine, which comprises the following steps:
When the function key of smart machine is triggered, the current display interface of the smart machine is detected;
Judge whether the current display interface is the corresponding function display interface of the function key;And
If the current display interface is not the function display interface, is stopped according to user response or unloaded described current The corresponding application of display interface.
2. the control method of smart machine according to claim 1, which is characterized in that the function key when smart machine When being triggered, the current display interface of the smart machine is detected, further comprises:
Whether it is called by the corresponding interface function of Home function key that Hook Function monitor operating system kernel provides, with inspection Survey whether Home function key is triggered;
When the Home function key is triggered, the current display interface is obtained, whether to judge the current display interface For the interface launcher.
3. the control method of smart machine according to claim 1, which is characterized in that stopped described according to user response Or before the corresponding application of the unloading current display interface, further includes:
The prompt information for whether stopping current interface application or unloading is sent to user.
4. the control method of smart machine according to claim 1, which is characterized in that it is described according to user response stop or The corresponding application of the current display interface is unloaded, further comprises:
Stop the corresponding application of the current display interface, and improves the permission limit grade to the application.
5. the control method of smart machine according to claim 4, which is characterized in that further include:
In dismount failure, pressed from both sides by system kernel Force Deletion application file.
6. a kind of control device of smart machine characterized by comprising
Detection module, for detecting the current display interface of the smart machine when the function key of smart machine is triggered;
Judgment module, for judging whether the current display interface is the corresponding function display interface of the function key;And
Protection module stops if not being the function display interface for the current display interface according to user response Or the corresponding application of the unloading current display interface.
7. the control device of smart machine according to claim 6, which is characterized in that the detection module further wraps It includes:
Detection unit, the corresponding interface function of Home function key for being provided by Hook Function monitor operating system kernel are It is no called, to detect whether Home function key is triggered;
Acquiring unit, it is described current to judge for obtaining the current display interface when the Home function key is triggered Whether display interface is the interface launcher.
8. the control device of smart machine according to claim 6, which is characterized in that stopped described according to user response Or before the corresponding application of the unloading current display interface, further includes:
The prompt information for whether stopping current interface application or unloading is sent to user.
9. the control device of smart machine according to claim 6, which is characterized in that it is described according to user response stop or The corresponding application of the current display interface is unloaded, further comprises:
Stop the corresponding application of the current display interface, and improves the permission limit grade to the application.
10. the control device of smart machine according to claim 9, which is characterized in that further include:
In dismount failure, pressed from both sides by system kernel Force Deletion application file.
CN201711403386.0A 2017-12-22 2017-12-22 The control method and device of smart machine Pending CN109977667A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201711403386.0A CN109977667A (en) 2017-12-22 2017-12-22 The control method and device of smart machine

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201711403386.0A CN109977667A (en) 2017-12-22 2017-12-22 The control method and device of smart machine

Publications (1)

Publication Number Publication Date
CN109977667A true CN109977667A (en) 2019-07-05

Family

ID=67072101

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201711403386.0A Pending CN109977667A (en) 2017-12-22 2017-12-22 The control method and device of smart machine

Country Status (1)

Country Link
CN (1) CN109977667A (en)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114138362A (en) * 2021-11-18 2022-03-04 武汉深之度科技有限公司 Anti-uninstalling method and device for kernel module and computing equipment

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
GB2505284A (en) * 2013-06-17 2014-02-26 F Secure Corp Anti-ransomware tool for mobile apparatus
CN104063134A (en) * 2014-07-03 2014-09-24 上海斐讯数据通信技术有限公司 Method for managing Android Launcher desktop
CN106203089A (en) * 2016-06-29 2016-12-07 北京金山安全软件有限公司 Method and device for preventing system color from being maliciously modified and electronic equipment
CN106709347A (en) * 2016-11-25 2017-05-24 腾讯科技(深圳)有限公司 Application running method and application running device

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
GB2505284A (en) * 2013-06-17 2014-02-26 F Secure Corp Anti-ransomware tool for mobile apparatus
CN104063134A (en) * 2014-07-03 2014-09-24 上海斐讯数据通信技术有限公司 Method for managing Android Launcher desktop
CN106203089A (en) * 2016-06-29 2016-12-07 北京金山安全软件有限公司 Method and device for preventing system color from being maliciously modified and electronic equipment
CN106709347A (en) * 2016-11-25 2017-05-24 腾讯科技(深圳)有限公司 Application running method and application running device

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
匡松 等: "《Visual C++开发宝典》", 30 November 2009, 中国铁道出版社 *

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114138362A (en) * 2021-11-18 2022-03-04 武汉深之度科技有限公司 Anti-uninstalling method and device for kernel module and computing equipment
CN114138362B (en) * 2021-11-18 2024-03-01 武汉深之度科技有限公司 Anti-unloading method and device for kernel module and computing equipment

Similar Documents

Publication Publication Date Title
US12019734B2 (en) Methods and apparatus for control and detection of malicious content using a sandbox environment
US11663323B2 (en) Process privilege escalation protection in a computing environment
US9330259B2 (en) Malware discovery method and system
US8397292B2 (en) Method and device for online secure logging-on
US20140215637A1 (en) Security arrangements for extended usb protocol stack of a usb host system
US9183392B2 (en) Anti-malware tool for mobile apparatus
CN101826139A (en) Method and device for detecting Trojan in non-executable file
CN104268475B (en) A kind of system for running application program
CN103955645A (en) Method, device and system for detecting malicious process behavior
CN101930515B (en) System and method for safely decompressing compressed file
CN104268471A (en) Method and device for detecting return-oriented programming attack
US7472288B1 (en) Protection of processes running in a computer system
JP5326063B1 (en) Malicious shellcode detection apparatus and method using debug events
CN102984134B (en) Safety defense system
CN109977667A (en) The control method and device of smart machine
CN102984135B (en) Safety defense method, equipment and system
KR20040090373A (en) Method for realtime monitoring/detecting/curing virus on wireless terminal
CN100520797C (en) Apparatus and method for preventing virus dynamic state attack program
CN106529295B (en) Improve the method and system and mobile terminal, storage medium of security of mobile terminal energy
US10572670B2 (en) Automated information technology substantive testing of security compliance within a user's context
CN111460451A (en) Software anti-virus infection system and method based on virus vaccine technology
CN106127032B (en) A kind of method and terminal intercepting application behavior
AU2017228541B2 (en) Automated information technology substantive testing of security compliance within a user's context
CA2978831C (en) Automated information technology substantive testing of security compliance within a user's context
US20240320323A1 (en) Methods and apparatus for control and detection of malicious content using a sandbox environment

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
RJ01 Rejection of invention patent application after publication

Application publication date: 20190705

RJ01 Rejection of invention patent application after publication