Software self-protection method

Abstract

The invention discloses an omnibearing software self-protection method which comprises: a plurality of hooks are built to monitor a plurality of operation requests which can be applied to the protected software; when at least one of the hooks intercepts the related operation requests, the intercepted operation requests are judged whether to be related with the protected software or not, if yes, then the intercepted operation requests are rejected; if not, then intercepted operation requests are allowed; wherein, a plurality of operation requests which can be applied to the protected software comprise: an operation request which can be used for tampering with a document; an operation request which can be used for tampering with registry keys; an operation request which can be used for modifying, reading and locking a memory and modifying the memory attribute; an operation request which can be used for an operation progress; an operation request which can be used for stopping and hanging up a thread; an operation request which can be used to inject the code; an operation request which can be used to inject a dynamic library; an operation request which can be used to queue APC and an operation request which can be used to simulate information.

Description

technical field

[0001] The present invention relates to software safety, in particular to an all-round software self-protection method. technical background

[0002] The rapid development of computer and network technology has greatly promoted information exchange. However, at the same time, computer viruses are constantly evolving and updating along with the development of technology. Today, computer viruses have seriously threatened people's normal use of computers. Thus, how to prevent virus attack has become a focus of attention.

[0003] With the development of anti-virus technology, the means of viruses are also constantly changing, and the confrontation between the two is also intensified. The way viruses fight against security software has also changed from deformation and hiding to more direct destruction, trying to achieve the purpose of confrontation by destroying some or all functions of security software.

[0004] In terms of self-protection, current security...

Images