A method and device for detecting the authenticity of an operating environment

Abstract

The invention discloses a method and a device for detecting authenticity of an operating environment, wherein the method comprises acquiring information of a program interface API in the current operating environment, comparing the information of the API in the current operating environment with corresponding API fingerprint information acquired in advance to obtain a comparison result, and verifying whether the current operating environment is an authentic operating environment according to the comparison result, wherein the API fingerprint information is characteristic information of the API in the authentic operating environment. By the method and the device provided by the invention, the accuracy in detecting the authenticity of the operating environment is greatly improved, and the method provided by the invention can be used in various operation systems to detect the authenticity of the operation systems.

Description

technical field [0001] The invention relates to the field of computer technology, in particular to a method and device for detecting the authenticity of an operating environment. Background technique [0002] Computer files can be divided into executable files and non-executable files according to their executable status. An executable file is a file that stores specific instructions or codes that can be loaded into computer memory and run on the computer to complete specific tasks. For example, in the commonly used Windows (Windows) operating system, some executable files with .exe suffix (such as notepad.exe, etc.), users can run these executable files and use the functions provided to complete a series of tasks. For example, executing notepad.exe can implement operations such as editing and saving text documents. Usually, an executable file runs in a specific operating system, and the operating system constructs a corresponding operating environment and provides corresp...

AI Technical Summary

Problems solved by technology

[0005] According to the application principle of "sheller", the operating environment detection technology has begun to be applied in the field of software protection. However, with the improvement of the simulation level of the virtual environment, the operating environment detection technology has also appeared a bottleneck, and the traditional detection methods are not enough to fight against the increasingly The more perfect the virtual environment simulation, therefore, the technical problem that urgently needs to be solved by those skilled in the art is how to more accurately detect whether the operating environment is normal, so as to detect abnormalities in time before the software runs and take measures to achieve self-protection the goal of

Images