Method and device for protecting window and electronic equipment
A window and hook function technology, applied in the field of system security, can solve problems such as undermining system security and affecting user experience, and achieve the effect of enhancing self-defense and improving user experience
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
Method used
Image
Examples
Embodiment 1
[0021] figure 1 It is a flowchart of the method for protecting a window in Embodiment 1 of the present invention, such as figure 1 As shown, the method of this embodiment may include:
[0022] Step 101, use the hook function to hook the user sending input function, and obtain the process name of the currently operating mouse and the process name of the top-level window when the user sending input function is called.
[0023] In this embodiment, the user sends the input function as the NtUserSendInput kernel function, and the click action of the mouse will call the NtUserSendInput kernel function;
[0024] In this embodiment, using the hook function to hook the user to send the input function can be: in SSDT (System Services Descriptor Table, system service descriptor table), find the function address of the NtUserSendInput kernel function, use the function address of the hook function to replace the SSDT The function address of the NtUserSendInput kernel function, so that th...
Embodiment 2
[0049] figure 2 It is a schematic structural diagram of the device for preventing the virtual mouse from operating the window according to the second embodiment of the present invention, as shown in figure 2 As shown, the device in this embodiment includes: a hook module 201, a process name acquisition module 202, a path acquisition module 203 and a processing module 204;
[0050] Hook module 201, for utilizing the hook function to hook the user to send the input function;
[0051] In this embodiment, the user sends the input function as the NtUserSendInput kernel function, and the click action of the mouse will call the NtUserSendInput kernel function;
[0052] The hook module 201 includes a search unit and a replacement unit;
[0053] The search unit is used to find the user sending input function address in the system service descriptor table;
[0054] The replacement unit is used to use the hook function address to replace the user sending input function address found...
PUM
Login to View More Abstract
Description
Claims
Application Information
Login to View More 