Unlock instant, AI-driven research and patent intelligence for your innovation.

A method and terminal for intercepting application program behavior

A technology of applications and malicious applications, which is applied in the field of intercepting application behaviors, can solve problems such as damage and affecting users' normal use of terminals, and achieve the effect of improving security

Active Publication Date: 2019-05-03
ZHUHAI BAOQU TECH CO LTD
View PDF4 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

Therefore, in order to prevent malicious programs from being detected and killed, malicious programs can register a global hook through the RegisterUserApiHook function to prevent detection by security software, so that malicious programs can be detected by security software and destroy any process of the terminal, affecting the normal use of the terminal by users

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • A method and terminal for intercepting application program behavior
  • A method and terminal for intercepting application program behavior
  • A method and terminal for intercepting application program behavior

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0043] The technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, rather than all the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative work shall fall within the protection scope of the present invention.

[0044] The execution subject in the embodiment of the present invention may be a terminal, and the described terminal may include: a computer, a tablet computer, a notebook, and other intelligent terminals. The above-mentioned terminal is only an example, not an exhaustive list, including but not limited to the above-mentioned terminal.

[0045] See figure 1 , Is a schematic flowchart of the first embodiment of a method for intercepting app...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

An embodiment of the invention discloses a method for intercepting application program behaviors. The method comprises: monitoring whether an application program registers a global hook; when the application program registers the global hook is monitored, determining whether the behavior of registering the global hook by the application program is a malicious behavior; when the behavior of registering the global hook by the application program is determined to be a malicious behavior, intercepting the behavior of the application program registering the global hook. An embodiment of the invention also discloses a terminal. Using the method can prevent a malicious program from registering hook, and prevent damages on a terminal system, so as to improve security of the terminal.

Description

Technical field [0001] The invention relates to the field of electronic technology, in particular to a method and terminal for intercepting application program behavior. Background technique [0002] When a thread in the process creates or closes a window, it will find out whether there is a hook function in the thread. When there is a hook function, the hook function is called and executed. [0003] At present, the system provides the RegisterUserApiHook function. The terminal can register a global hook in the system through the RegisterUserApiHook function. This hook is called when certain messages are processed by any application in the system. Therefore, in order to prevent malicious programs from being detected and killed, malicious programs can register global hooks through the RegisterUserApiHook function to prevent security software from being detected, so that the malicious programs can be detected by the security software and damage any process of the terminal, affecting ...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Patents(China)
IPC IPC(8): G06F21/51G06F21/56
CPCG06F21/51G06F21/566
Inventor 杨峰
Owner ZHUHAI BAOQU TECH CO LTD