CN109977667A - The control method and device of smart machine - Google Patents
The control method and device of smart machine Download PDFInfo
- Publication number
- CN109977667A CN109977667A CN201711403386.0A CN201711403386A CN109977667A CN 109977667 A CN109977667 A CN 109977667A CN 201711403386 A CN201711403386 A CN 201711403386A CN 109977667 A CN109977667 A CN 109977667A
- Authority
- CN
- China
- Prior art keywords
- display interface
- smart machine
- current display
- interface
- function
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
- G06F21/55—Detecting local intrusion or implementing counter-measures
- G06F21/56—Computer malware detection or handling, e.g. anti-virus arrangements
- G06F21/566—Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F8/00—Arrangements for software engineering
- G06F8/60—Software deployment
- G06F8/61—Installation
- G06F8/62—Uninstallation
Landscapes
- Engineering & Computer Science (AREA)
- General Engineering & Computer Science (AREA)
- Software Systems (AREA)
- Theoretical Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Hardware Design (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Health & Medical Sciences (AREA)
- General Health & Medical Sciences (AREA)
- Virology (AREA)
- User Interface Of Digital Computer (AREA)
Abstract
The invention discloses a kind of control method and device of smart machine, wherein method includes: to detect the current display interface of smart machine when the function key of smart machine is triggered;Judge whether current display interface is the corresponding function display interface of function key;If current display interface is not function display interface, stop or unload the corresponding application of current display interface according to user response.This method can stop according to user response or unload the corresponding application of current display interface to improve the safety of equipment to effectively improve the safeguard function of equipment when current display interface is not function display interface.
Description
Technical field
The present invention relates to smart machine application Interception Technology field, the in particular to control methods and dress of a kind of smart machine
It sets.
Background technique
The end PC (personal computer, personal computer), which is extorted in software set, at present breaks out, and causes very severe
Influence, android there are also software is extorted, only by antivirus software carry out feature or packet name investigation.If transported
Row extorts software, will cause android device screen screen locking, and the specific password of purchase of only paying can just unlock.
In the related technology, by matching characteristic code when installation new opplication and packet name, or according to application application permission and portion
Divide registration information screening virus.
However, although android antivirus software will do it cloud killing in downloading and installation, then notify user whether be
Extort software, but once have it is not found extort software by user installation and operation after, the equipment of user can be seriously by prestige
The side of body, leads to that effective protection and solution cannot be made, it would be highly desirable to solve when having infected blackmailer's malicious virus.
Summary of the invention
The present invention is directed to solve at least some of the technical problems in related technologies.
For this purpose, can effectively improve equipment an object of the present invention is to provide a kind of control method of smart machine
Safeguard function, improve the safety of equipment.
It is another object of the present invention to the control devices for proposing a kind of smart machine.
In order to achieve the above objectives, one aspect of the present invention embodiment proposes a kind of control method of smart machine, including with
Lower step: when the function key of smart machine is triggered, the current display interface of the smart machine is detected;Judge described current
Whether display interface is the corresponding function display interface of the function key;If the current display interface is not that the function is aobvious
Show interface, then stops or unload the corresponding application of the current display interface according to user response.
The control method of the smart machine of the embodiment of the present invention can not be function display interface in current display interface
When, stopped according to user response or unload the corresponding application of current display interface, so that effective protection, which has infected, extorts software
Smart machine, effectively improve the safeguard function of equipment, improve the safety of equipment.
Further, in one embodiment of the invention, described when the function key of smart machine is triggered, detect institute
The current display interface for stating smart machine further comprises: the Home function provided by Hook Function monitor operating system kernel
Whether the corresponding interface function of energy key is called, to detect whether Home function key is triggered;It is touched in the Home function key
When hair, the current display interface is obtained, to judge whether the current display interface is the interface launcher.
Further, in one embodiment of the invention, stopped according to user response or unloaded described current described
Before the corresponding application of display interface, further includes: the prompt information for whether stopping current interface application or unloading sent to user.
Further, in one embodiment of the invention, described to be stopped according to user response or unloaded described current aobvious
Show the corresponding application in interface, further comprise: stopping the corresponding application of the current display interface, and improve to the application
Permission limit grade.
Further, in one embodiment of the invention, further includes: in dismount failure, forced by system kernel
Delete application file folder.
In order to achieve the above objectives, another aspect of the present invention embodiment proposes a kind of control device of smart machine, comprising:
Detection module, for detecting the current display interface of the smart machine when the function key of smart machine is triggered;Judge mould
Block, for judging whether the current display interface is the corresponding function display interface of the function key;Protection module, for such as
Current display interface described in fruit is not the function display interface, then stops or unload current display circle according to user response
The corresponding application in face.
The control device of the smart machine of the embodiment of the present invention can not be function display interface in current display interface
When, stopped according to user response or unload the corresponding application of current display interface, so that effective protection, which has infected, extorts software
Smart machine, effectively improve the safeguard function of equipment, improve the safety of equipment.
Further, in one embodiment of the invention, the detection module, further comprise: detection unit is used for
Whether it is called by the corresponding interface function of Home function key that Hook Function monitor operating system kernel provides, with detection
Whether Home function key is triggered;Acquiring unit, for obtaining current display circle when the Home function key is triggered
Face, to judge whether the current display interface is the interface launcher.
Further, in one embodiment of the invention, stopped according to user response or unloaded described current described
Before the corresponding application of display interface, further includes: the prompt information for whether stopping current interface application or unloading sent to user.
Further, in one embodiment of the invention, described to be stopped according to user response or unloaded described current aobvious
Show the corresponding application in interface, further comprise: stopping the corresponding application of the current display interface, and improve to the application
Permission limit grade.
Further, in one embodiment of the invention, further includes: in dismount failure, forced by system kernel
Delete application file folder.
The additional aspect of the present invention and advantage will be set forth in part in the description, and will partially become from the following description
Obviously, or practice through the invention is recognized.
Detailed description of the invention
Above-mentioned and/or additional aspect and advantage of the invention will become from the following description of the accompanying drawings of embodiments
Obviously and it is readily appreciated that, in which:
Fig. 1 is the flow chart according to the control method of the smart machine of the embodiment of the present invention;
Fig. 2 is the flow chart according to the control method of the smart machine of a specific embodiment of the invention;
Fig. 3 is the structural schematic diagram according to the control device of the smart machine of the embodiment of the present invention.
Specific embodiment
The embodiment of the present invention is described below in detail, examples of the embodiments are shown in the accompanying drawings, wherein from beginning to end
Same or similar label indicates same or similar element or element with the same or similar functions.Below with reference to attached
The embodiment of figure description is exemplary, it is intended to is used to explain the present invention, and is not considered as limiting the invention.
The control method and device of the smart machine proposed according to embodiments of the present invention are described with reference to the accompanying drawings, first will
Describe the control method of the smart machine proposed according to embodiments of the present invention with reference to the accompanying drawings.
Fig. 1 is the flow chart of the control method of the smart machine of the embodiment of the present invention.
As shown in Figure 1, the control method of the smart machine the following steps are included:
In step s101, when the function key of smart machine is triggered, the current display interface of smart machine is detected.
In general, when the function key of smart machine is triggered, system can make corresponding movement, for example, when mobile phone returns
When key triggers, system can call automatically return function to return it to previous menu, therefore, be touched in the function key of smart machine
When hair, the embodiment of the present invention can detect the current display interface of smart machine.
Further, in one embodiment of the invention, when the function key of smart machine is triggered, detection intelligence is set
Standby current display interface further comprises: the Home function key provided by Hook Function monitor operating system kernel is corresponding
Interface function whether be called, to detect whether Home function key is triggered;When Home function key is triggered, obtain current
Display interface, to judge whether current display interface is the interface launcher.
It is understood that Hook Function is a part of windows messaging treatment mechanism, by setting " hook ", answer
All message, event can be filtered system-level with program, access the message that can not be accessed under normal circumstances.Its
In, the essence of hook is one section of program to processing system message, is called by system, it is linked into system.
For example, when Home key triggers, Hook Function can monitor the Home function that operating system nucleus provides
The function of the Home key triggering of the corresponding interface of key is called, to obtain current display interface, and judges that current interface is not
It is the interface launcher.
That is, the embodiment of the present invention can monitor whether Home key is triggered by hook technology.
In step s 102, judge whether current display interface is the corresponding function display interface of function key.
It is understood that some execute the malicious process of malice task, such as virus, worm and Trojan Horse process
Deng malicious process can invade operating system, cause the destruction to operating system, and after user runs this program, interface
It can be locked, therefore the embodiment of the present invention judges whether current display interface is the corresponding function display interface of function key.
For example, when user is when using android equipment, by fishing website or the trick downloading of malice ad ware
And be mounted with to extort software, this extorts software not in the virus base of antivirus software and does not find malice row by registration information
For, antivirus software will not warning note, and after user runs this program, interface is locked, can only carry out payment purchase password it
The interface for extorting software can be just unlocked afterwards, therefore the embodiment of the present invention judges whether current display interface is that function key is corresponding
Function display interface
In step s 103, if current display interface is not function display interface, stop or unload according to user response
Carry the corresponding application of current display interface.
It is understood that when the function key of smart machine is triggered, and the current display interface of smart machine is not
It is function display interface, the embodiment of the present invention can stop according to user response or unload the corresponding application of current display interface.
For example, when user has pressed Home key, interface is still shown in smart machine interface or one wide
Accuse interface, or extort interface etc., it is not system main interface.
Further, in one embodiment of the invention, stopping or unloading current display interface according to user response
Before corresponding application, the method for the embodiment of the present invention further include: sent to user and whether stop current interface application or unloading
Prompt information.
For example, interface or an advertising circle is still shown in smart machine interface when user has pressed Home key
Face, or extort interface etc., the smart machine of the embodiment of the present invention can send whether stop current interface application or unload to user
The prompt information of load, so that user determines whether to unload or stop application.
Further, in one embodiment of the invention, stop or unload current display interface pair according to user response
The application answered further comprises: stopping the corresponding application of current display interface, and improves the permission limit grade to application.
For example, the embodiment of the present invention can monitor hardware driving, when user's point by hook linux kernel API
After hitting Home key, the interface of present uppermost is then taken by hook window api, and whether judge current display interface
Early warning is not triggered then, i.e., does not pop up prompt information if it is the interface launcher for the interface launcher;If it is not, intelligence
Equipment will pop up again prompt in window top layer, tell that present uppermost is occupied user by malicious application, and can be strong
Stop is stopped or unloading.Forcing to stop this in application, Android system can be stopped to the ownership of the application using modification kernel
Limit, prevents it to be again started up.
It should be noted that the embodiment of the present invention can with but be not limited to after virus is extorted in infection, monitor hardware driving,
Then the protection method for stopping top layer's application by force, is specifically operated by those skilled in the art according to the actual situation,
It is not specifically limited herein
Further, in one embodiment of the invention, the method for the embodiment of the present invention further include: in dismount failure
When, it is pressed from both sides by system kernel Force Deletion application file.
It is understood that the embodiment of the present invention is answered when unloading malicious application failure by system kernel Force Deletion
With file, it is again started up to prevent malicious application.
As shown in Fig. 2, in one particular embodiment of the present invention, the control method of the smart machine of the embodiment of the present invention
The step of it is as follows:
First choice, user need to install the application of the embodiment of the present invention on intelligent devices, and start;After closing, the present invention
Embodiment can protect blackmailer on backstage, and will not influence the use of user when not infecting.
In step sl, when the user clicks Home key when, trigger this application testing process.
In step s 2, when user clicks home, current interface is obtained, judges whether it is launcher application.If so,
S11 is thened follow the steps,;If it is not, executing step S3.
In step s3, if not the interface launcher, retrogressing event is judged, after judging whether current interface intercepts
It moves back, if it is not, terminating;If so, thening follow the steps S4.
That is, judging retrogressing event if not the interface launcher, judge whether current interface intercepts retrogressing,
Retrogressing event is such as intercepted, and is started in backstage kill other application, is judged to extorting software.
In step s 4, it judges whether there is other normal uses to be forced to terminate, if it is not, terminating, if so, then
Execute step S5.
In step s 5, prompting user to exist can be with behavior.
In step s 6, judge whether to intercept by user, if it is not, then terminating, if so, executing S7.
That is, prompting the user whether to stop current interface application or unloading by window api.
In the step s 7, suspicious actions are terminated.
In step s 8, suspicious application permission is modified, prevents it from opening certainly.
That is, stopping as user clicks, force to stop application by kernel api, and modify whole permissions of application,
Prevent its self-starting.
In step s 9, user chooses whether to unload, if it is not, then terminating;If so, executing step S10.
In step slo, unloading can apply.
That is, as user clicks unloading.System api forced unloading application is then first passed through, such as finds dismount failure, is led to
Cross system kernel Force Deletion application file folder.
In step s 11, exit-entry operation, and terminate.
The control method of the smart machine proposed according to embodiments of the present invention can not be that function is aobvious in current display interface
When showing interface, is stopped according to user response or unload the corresponding application of current display interface, and can be found that and position Le
Rope software, to prompt the user whether to stop its operation and unloading, so that effective protection has infected the smart machine for extorting software,
The safeguard function for effectively improving equipment improves the safety of equipment.
Referring next to the control device for the smart machine that attached drawing description proposes according to embodiments of the present invention.
Fig. 3 is the structural schematic diagram of the control device of the smart machine of the embodiment of the present invention.
As shown in figure 3, the control device 10 of the smart machine includes: detection module 100, judgment module 200 and protection mould
Block 300.
Wherein, detection module 100 is used for when the function key of smart machine is triggered, and detects the current display of smart machine
Interface.Judgment module 200 is for judging whether current display interface is the corresponding function display interface of function key.Protection module
If 300 be not function display interface for current display interface, stop or unload current display interface according to user response
Corresponding application.The device 10 of the embodiment of the present invention can be when current display interface be function display interface, according to user
Response stops or unloads the corresponding application of current display interface and improves the peace of equipment to effectively improve the safeguard function of equipment
Quan Xing.
Further, in one embodiment of the invention, detection module further comprises: detection unit, for passing through
Whether the corresponding interface function of Home function key that Hook Function monitor operating system kernel provides is called, to detect Home function
Whether energy key is triggered;Acquiring unit, it is current to judge for obtaining current display interface when Home function key is triggered
Whether display interface is the interface launcher.
Further, in one embodiment of the invention, stopping or unloading current display interface according to user response
Before corresponding application, further includes: the prompt information for whether stopping current interface application or unloading sent to user.
Further, in one embodiment of the invention, stop or unload current display interface pair according to user response
The application answered further comprises: stopping the corresponding application of current display interface, and improves the permission limit grade to application.
Further, in one embodiment of the invention, further includes: in dismount failure, forced by system kernel
Delete application file folder.
It should be noted that the explanation of the aforementioned control method embodiment to smart machine is also applied for the embodiment
Smart machine control device, details are not described herein again.
The control device of the smart machine proposed according to embodiments of the present invention can not be that function is aobvious in current display interface
When showing interface, is stopped according to user response or unload the corresponding application of current display interface, and can be found that and position Le
Rope software, to prompt the user whether to stop its operation and unloading, so that effective protection has infected the smart machine for extorting software,
The safeguard function for effectively improving equipment improves the safety of equipment.
In the description of the present invention, it is to be understood that, term " center ", " longitudinal direction ", " transverse direction ", " length ", " width ",
" thickness ", "upper", "lower", "front", "rear", "left", "right", "vertical", "horizontal", "top", "bottom" "inner", "outside", " up time
The orientation or positional relationship of the instructions such as needle ", " counterclockwise ", " axial direction ", " radial direction ", " circumferential direction " be orientation based on the figure or
Positional relationship is merely for convenience of description of the present invention and simplification of the description, rather than the device or element of indication or suggestion meaning must
There must be specific orientation, be constructed and operated in a specific orientation, therefore be not considered as limiting the invention.
In addition, term " first ", " second " are used for descriptive purposes only and cannot be understood as indicating or suggesting relative importance
Or implicitly indicate the quantity of indicated technical characteristic.Define " first " as a result, the feature of " second " can be expressed or
Implicitly include at least one this feature.In the description of the present invention, the meaning of " plurality " is at least two, such as two, three
It is a etc., unless otherwise specifically defined.
In the present invention unless specifically defined or limited otherwise, term " installation ", " connected ", " connection ", " fixation " etc.
Term shall be understood in a broad sense, for example, it may be being fixedly connected, may be a detachable connection, or integral;It can be mechanical connect
It connects, is also possible to be electrically connected;It can be directly connected, can also can be in two elements indirectly connected through an intermediary
The interaction relationship of the connection in portion or two elements, unless otherwise restricted clearly.For those of ordinary skill in the art
For, the specific meanings of the above terms in the present invention can be understood according to specific conditions.
In the present invention unless specifically defined or limited otherwise, fisrt feature in the second feature " on " or " down " can be with
It is that the first and second features directly contact or the first and second features pass through intermediary mediate contact.Moreover, fisrt feature exists
Second feature " on ", " top " and " above " but fisrt feature be directly above or diagonally above the second feature, or be merely representative of
First feature horizontal height is higher than second feature.Fisrt feature can be under the second feature " below ", " below " and " below "
One feature is directly under or diagonally below the second feature, or is merely representative of first feature horizontal height less than second feature.
In the description of this specification, reference term " one embodiment ", " some embodiments ", " example ", " specifically show
The description of example " or " some examples " etc. means specific features, structure, material or spy described in conjunction with this embodiment or example
Point is included at least one embodiment or example of the invention.In the present specification, schematic expression of the above terms are not
It must be directed to identical embodiment or example.Moreover, particular features, structures, materials, or characteristics described can be in office
It can be combined in any suitable manner in one or more embodiment or examples.In addition, without conflicting with each other, the skill of this field
Art personnel can tie the feature of different embodiments or examples described in this specification and different embodiments or examples
It closes and combines.
Although the embodiments of the present invention has been shown and described above, it is to be understood that above-described embodiment is example
Property, it is not considered as limiting the invention, those skilled in the art within the scope of the invention can be to above-mentioned
Embodiment is changed, modifies, replacement and variant.
Claims (10)
1. a kind of control method of smart machine, which comprises the following steps:
When the function key of smart machine is triggered, the current display interface of the smart machine is detected;
Judge whether the current display interface is the corresponding function display interface of the function key;And
If the current display interface is not the function display interface, is stopped according to user response or unloaded described current
The corresponding application of display interface.
2. the control method of smart machine according to claim 1, which is characterized in that the function key when smart machine
When being triggered, the current display interface of the smart machine is detected, further comprises:
Whether it is called by the corresponding interface function of Home function key that Hook Function monitor operating system kernel provides, with inspection
Survey whether Home function key is triggered;
When the Home function key is triggered, the current display interface is obtained, whether to judge the current display interface
For the interface launcher.
3. the control method of smart machine according to claim 1, which is characterized in that stopped described according to user response
Or before the corresponding application of the unloading current display interface, further includes:
The prompt information for whether stopping current interface application or unloading is sent to user.
4. the control method of smart machine according to claim 1, which is characterized in that it is described according to user response stop or
The corresponding application of the current display interface is unloaded, further comprises:
Stop the corresponding application of the current display interface, and improves the permission limit grade to the application.
5. the control method of smart machine according to claim 4, which is characterized in that further include:
In dismount failure, pressed from both sides by system kernel Force Deletion application file.
6. a kind of control device of smart machine characterized by comprising
Detection module, for detecting the current display interface of the smart machine when the function key of smart machine is triggered;
Judgment module, for judging whether the current display interface is the corresponding function display interface of the function key;And
Protection module stops if not being the function display interface for the current display interface according to user response
Or the corresponding application of the unloading current display interface.
7. the control device of smart machine according to claim 6, which is characterized in that the detection module further wraps
It includes:
Detection unit, the corresponding interface function of Home function key for being provided by Hook Function monitor operating system kernel are
It is no called, to detect whether Home function key is triggered;
Acquiring unit, it is described current to judge for obtaining the current display interface when the Home function key is triggered
Whether display interface is the interface launcher.
8. the control device of smart machine according to claim 6, which is characterized in that stopped described according to user response
Or before the corresponding application of the unloading current display interface, further includes:
The prompt information for whether stopping current interface application or unloading is sent to user.
9. the control device of smart machine according to claim 6, which is characterized in that it is described according to user response stop or
The corresponding application of the current display interface is unloaded, further comprises:
Stop the corresponding application of the current display interface, and improves the permission limit grade to the application.
10. the control device of smart machine according to claim 9, which is characterized in that further include:
In dismount failure, pressed from both sides by system kernel Force Deletion application file.
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201711403386.0A CN109977667A (en) | 2017-12-22 | 2017-12-22 | The control method and device of smart machine |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201711403386.0A CN109977667A (en) | 2017-12-22 | 2017-12-22 | The control method and device of smart machine |
Publications (1)
Publication Number | Publication Date |
---|---|
CN109977667A true CN109977667A (en) | 2019-07-05 |
Family
ID=67072101
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN201711403386.0A Pending CN109977667A (en) | 2017-12-22 | 2017-12-22 | The control method and device of smart machine |
Country Status (1)
Country | Link |
---|---|
CN (1) | CN109977667A (en) |
Cited By (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN114138362A (en) * | 2021-11-18 | 2022-03-04 | 武汉深之度科技有限公司 | Anti-uninstalling method and device for kernel module and computing equipment |
Citations (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
GB2505284A (en) * | 2013-06-17 | 2014-02-26 | F Secure Corp | Anti-ransomware tool for mobile apparatus |
CN104063134A (en) * | 2014-07-03 | 2014-09-24 | 上海斐讯数据通信技术有限公司 | Method for managing Android Launcher desktop |
CN106203089A (en) * | 2016-06-29 | 2016-12-07 | 北京金山安全软件有限公司 | Method and device for preventing system color from being maliciously modified and electronic equipment |
CN106709347A (en) * | 2016-11-25 | 2017-05-24 | 腾讯科技(深圳)有限公司 | Application running method and application running device |
-
2017
- 2017-12-22 CN CN201711403386.0A patent/CN109977667A/en active Pending
Patent Citations (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
GB2505284A (en) * | 2013-06-17 | 2014-02-26 | F Secure Corp | Anti-ransomware tool for mobile apparatus |
CN104063134A (en) * | 2014-07-03 | 2014-09-24 | 上海斐讯数据通信技术有限公司 | Method for managing Android Launcher desktop |
CN106203089A (en) * | 2016-06-29 | 2016-12-07 | 北京金山安全软件有限公司 | Method and device for preventing system color from being maliciously modified and electronic equipment |
CN106709347A (en) * | 2016-11-25 | 2017-05-24 | 腾讯科技(深圳)有限公司 | Application running method and application running device |
Non-Patent Citations (1)
Title |
---|
匡松 等: "《Visual C++开发宝典》", 30 November 2009, 中国铁道出版社 * |
Cited By (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN114138362A (en) * | 2021-11-18 | 2022-03-04 | 武汉深之度科技有限公司 | Anti-uninstalling method and device for kernel module and computing equipment |
CN114138362B (en) * | 2021-11-18 | 2024-03-01 | 武汉深之度科技有限公司 | Anti-unloading method and device for kernel module and computing equipment |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US12019734B2 (en) | Methods and apparatus for control and detection of malicious content using a sandbox environment | |
US11663323B2 (en) | Process privilege escalation protection in a computing environment | |
US9330259B2 (en) | Malware discovery method and system | |
US8397292B2 (en) | Method and device for online secure logging-on | |
US20140215637A1 (en) | Security arrangements for extended usb protocol stack of a usb host system | |
US9183392B2 (en) | Anti-malware tool for mobile apparatus | |
CN101826139A (en) | Method and device for detecting Trojan in non-executable file | |
CN104268475B (en) | A kind of system for running application program | |
CN103955645A (en) | Method, device and system for detecting malicious process behavior | |
CN101930515B (en) | System and method for safely decompressing compressed file | |
CN104268471A (en) | Method and device for detecting return-oriented programming attack | |
US7472288B1 (en) | Protection of processes running in a computer system | |
JP5326063B1 (en) | Malicious shellcode detection apparatus and method using debug events | |
CN102984134B (en) | Safety defense system | |
CN109977667A (en) | The control method and device of smart machine | |
CN102984135B (en) | Safety defense method, equipment and system | |
KR20040090373A (en) | Method for realtime monitoring/detecting/curing virus on wireless terminal | |
CN100520797C (en) | Apparatus and method for preventing virus dynamic state attack program | |
CN106529295B (en) | Improve the method and system and mobile terminal, storage medium of security of mobile terminal energy | |
US10572670B2 (en) | Automated information technology substantive testing of security compliance within a user's context | |
CN111460451A (en) | Software anti-virus infection system and method based on virus vaccine technology | |
CN106127032B (en) | A kind of method and terminal intercepting application behavior | |
AU2017228541B2 (en) | Automated information technology substantive testing of security compliance within a user's context | |
CA2978831C (en) | Automated information technology substantive testing of security compliance within a user's context | |
US20240320323A1 (en) | Methods and apparatus for control and detection of malicious content using a sandbox environment |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PB01 | Publication | ||
PB01 | Publication | ||
SE01 | Entry into force of request for substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
RJ01 | Rejection of invention patent application after publication |
Application publication date: 20190705 |
|
RJ01 | Rejection of invention patent application after publication |