Screen capture processing method, device and electronic equipment

A screen capture and processing module technology, applied in the field of information security, can solve the problems of low security protection efficiency of the operating system, and achieve the effect of improving security protection efficiency

Active Publication Date: 2019-07-23
ZHUHAI BAOQU TECH CO LTD
View PDF4 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0005] In view of this, the embodiments of the present invention provide a screen capture processing method, device and electronic equipment, which can improve the security protection efficiency of the operating system, so as to solve the existing screen capture processing method, by directly calling the kernel NtGdiBitBlt function or The kernel NtGdiStretchBlt function is used to capture the screen of the operating system environment, which leads to the problem of low security protection efficiency of the operating system

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Screen capture processing method, device and electronic equipment
  • Screen capture processing method, device and electronic equipment
  • Screen capture processing method, device and electronic equipment

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0047] figure 1 It is a schematic flowchart of a method for processing screenshots according to an embodiment of the present invention, such as figure 1 As shown, the method of this embodiment may include:

[0048] Step 101, when the pre-injected hook function detects that the kernel screenshot calling function is called, hook the kernel screenshot calling function;

[0049] In this step, as an optional embodiment, the kernel screenshot calling function includes: a kernel calling bit block conversion function (kernel NtGdiBitBlt function) and a kernel calling bitmap copy function (kernel NtGdiStretchBlt function).

[0050] In this embodiment, as an optional embodiment, the hook function is located in the kernel layer of the operating system.

[0051] In the embodiment of the present invention, the injected hook function is used to monitor the application layer process, that is, to monitor the function call related operation of the application program process located at the a...

Embodiment 2

[0081] figure 2 It is a schematic structural diagram of an apparatus for processing screenshots according to Embodiment 2 of the present invention, such as figure 2 As shown, the apparatus of this embodiment may include: a hooking module 21, an application program acquiring module 22, and a screen capture processing module 23, wherein,

[0082] The hooking module 21 is used to hook the kernel screenshot calling function when the pre-injected hook function detects that the kernel screenshot calling function is called;

[0083]In this embodiment, as an optional embodiment, a hook function can be injected when the Kingsoft Internet Security Defense driver application is loaded.

[0084] In this embodiment of the present invention, as an optional embodiment, the application layer process is a screen capture process created by the operating system at the application layer according to the screen capture request when an application sends a screen capture request to the operating ...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

Embodiments of the present invention disclose a method, device and electronic device for processing screenshots, which relate to information security technology and can improve the security protection efficiency of the operating system. The method of processing the screenshot includes: when the pre-injected hook function detects that the kernel screenshot calling function is called, hooking the kernel screenshot calling function; obtaining the process path information of the application layer process that calls the kernel screenshot calling function, and extracting The application to be verified that is mapped by the process path information; if the application to be verified is the same as any application to be intercepted in the preset application library to be intercepted, deny the application to be verified to call the kernel screenshot Call functions. The invention is suitable for security monitoring of screenshots of the operating system environment.

Description

technical field [0001] The present invention relates to information security technology, and in particular, to a method, device and electronic device for processing screenshots. Background technique [0002] With the gradual disclosure of the technical details of the kernel layer of the Windows operating system, more and more malicious applications such as Trojan horse viruses have begun to use the kernel layer driver to protect their own processes. The processes of malicious applications protected by the kernel layer driver can End (kill) other processes in the Windows operating system, so that the malicious application process can conduct malicious attacks on the user's process or system process according to the intention of the malicious application provider, which may cause the computer to run unstable, or even cause The leakage of user information brings great economic losses to the user. For example, malicious use of applications to the operating system environment of ...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & AuthorityPatents(China)
IPC IPC(8): G06F9/451
CPCG06F9/451
Inventor杨峰
OwnerZHUHAI BAOQU TECH CO LTD