Unlock instant, AI-driven research and patent intelligence for your innovation.

Method, apparatus and computer system for dynamically detecting program execution route

A computer system and program execution technology, applied in the field of dynamic detection of program execution paths, can solve problems such as inability to detect real-time detection, high system performance consumption, and inability to dynamically increase detection points for real-time detection.

Inactive Publication Date: 2012-11-28
HUAWEI TECH CO LTD
View PDF3 Cites 7 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0003] However, for the application program, the detection method using the debugging tool is not suitable for detecting the problems generated after the formal use of the program, and cannot detect in real time
For the kernel state program, using the method of pre-adding detection points in the kernel program will consume a lot of system performance, and this method is only applicable to static presets, and cannot dynamically increase detection points for real-time detection

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Method, apparatus and computer system for dynamically detecting program execution route
  • Method, apparatus and computer system for dynamically detecting program execution route
  • Method, apparatus and computer system for dynamically detecting program execution route

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0027] An embodiment of the present invention provides a method for dynamically detecting a program execution path, the method is applied to a computer system with a processor with an instruction transfer recording function, and the processor records the instruction transfer of each program running on the computer system information such as figure 1 As shown, the method includes:

[0028] 101. Obtain an instruction transfer information set of the detected program from the instruction transfer information recorded by the processor according to the process feature code of the detected program, the instruction transfer information set includes at least one instruction transfer information, and each The instruction transfer information includes symbol tables of functions to which the instructions executed before and after the instruction transfer belong.

[0029] Wherein, each program may have multiple instruction transfers during the running process, such as ordinary instruction...

Embodiment 2

[0052] Embodiments of the present invention also provide a method for dynamically detecting program execution paths, such as Figure 5 As shown, the method includes:

[0053] 501. Store instruction transfer information of a program running on the computer system recorded by the processor in a preconfigured storage area.

[0054] Wherein, each program may have multiple instruction transfers during the running process, such as ordinary instruction transfers, instruction transfers caused by interrupts or exceptions, wherein ordinary transfer instructions include jump, call and loop instructions.

[0055] During the operation of the computer system, the hardware monitoring function of the processor is enabled, the program running on the computer system is monitored, and the instruction transfer information of the program running on the computer system is recorded in the memory buffer of the processor. At the same time, each computer system assigns a process signature code to each...

Embodiment 3

[0087] An embodiment of the present invention provides a device 70 for dynamically detecting a program execution path. The device 70 includes: an acquisition unit 71 , a first filter unit 72 , a third filter unit 73 , a generation unit 74 and a determination unit 75 .

[0088] The obtaining unit 71 is configured to store the instruction transfer information recorded by the processor in a preconfigured storage area; obtain the instruction transfer information stored in the preconfigured stored instruction transfer information set according to the process characteristic code of the detected program. The instruction transfer information set of the detected program, the instruction transfer information set includes at least one instruction transfer information, and each instruction transfer information includes the symbol table of the function to which the instruction executed before and after each instruction transfer belongs and the function privilege level.

[0089] Wherein, ea...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The embodiment of the invention provides a method, an apparatus and a computer system for dynamically detecting a program execution route, which can realize real-time dynamic detection on the program execution route and have generality for application programs and kernel mode programs. The method comprises the following steps: acquiring an instruction transfer information set of a detected program from an instruction transfer information set recorded in a processor according to a process feature code of the detected program, wherein the instruction transfer information set includes at least one instruction transfer information, each instruction transfer information includes symbol tables of functions, to which the instruction belongs, and the symbol tables run before and after the instruction is transferred; and generating the program execution route of the detected program according to the symbol tables of the functions, to which the instruction belongs, wherein the symbol tables run before and after each instruction is transferred, and the program execution route of the detected program includes a function invoking relationship during running of the detected program. The embodiment of the invention is applicable to the technical field of information.

Description

technical field [0001] The invention relates to the field of information technology, in particular to a method, device and computer system for dynamically detecting program execution paths. Background technique [0002] In modern computer technology, application debugging tools can detect the execution path of the application during the development stage, know the execution process of the application, and understand the internal operating logic, so as to detect application loopholes. The kernel state program adopts the method of adding detection points in the kernel program in advance to detect the execution path of the kernel program, and detects the loopholes of the application program according to the execution path of the program. [0003] However, for the application program, the detection method using the debugging tool is not suitable for detecting problems generated after the formal use of the program, and cannot be detected in real time. For the kernel mode program...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Applications(China)
IPC IPC(8): G06F11/36
Inventor 李俊张超
Owner HUAWEI TECH CO LTD