Looking for breakthrough ideas for innovation challenges? Try Patsnap Eureka!

Method and device for plug-in program detection

A program detection and program technology, applied in the computer field, can solve the problems of high labor cost, undetectable plug-in programs, large pattern maintenance and timely update, etc., to reduce costs, reduce sample collection and analysis workload, and later operation and maintenance. Workload and the effect of ensuring detection accuracy

Active Publication Date: 2020-12-04
ALIBABA GRP HLDG LTD
View PDF5 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0009] However, pattern-based detection has big problems in pattern maintenance and timely update, and it needs to spend a lot of manpower and material resources to compete with plug-in program developers.
And new plugins are always undetected for an initial period of time

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Method and device for plug-in program detection
  • Method and device for plug-in program detection

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0062] To improve the accuracy of plug-in program detection and reduce the detection cost, in the embodiment of the present invention, a new multi-clip program detection method is designed. Specifically, a special detection method is designed according to the operating behavior characteristics of the plug-in program. Because A plug-in usually needs to inject its own code into the application to achieve the plug-in effect. Therefore, it is only necessary to detect whether the running behavior of the application is abnormal to know whether there is a plug-in.

[0063] Preferred embodiments of the present invention will be described in detail below in conjunction with the accompanying drawings.

[0064] refer to figure 1 As shown, in the embodiment of the present invention, the specific method of plug-in program detection is as follows:

[0065] Step 100: Determine the path of the executable file loaded by the target application program, and filter out the first type of executable...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention relates to the field of a computer, particularly relates to a plug-in detection method and device and is used for improving the plug-in detection accuracy and reducing the detection cost. The method comprises the steps of screening first-type executable files with suspicious paths from executable files loaded by a target application; screening second-type executable files corresponding to hooked APIs according to the APIs called in an operation process of the target application; and judging the executable files which belong to the first-type executable files and also belong to the second-type executable files as plug-ins. On the basis of the working principle of the plug-ins, the existing space of the plug-ins is blocked from a source; the plug-in detection accuracy is effectively ensured; sample collection and analysis workload and follow-up operation and maintenance workloads resulting from researching and developing anti-plug-ins are greatly reduced; and the cost is effectively reduced.

Description

technical field [0001] The invention relates to the field of computers, in particular to a method and device for detecting plug-in programs. Background technique [0002] At present, in the software development industry, many software developers have a strong demand for anti-cheat programs. In order to maintain the balance and usability of software products, most software developers often use various technical means to block plug-in programs. [0003] Under normal circumstances, there are the following two types of existing anti-plug-in technical solutions: [0004] 1) Business prevention and detection. [0005] That is to formulate targeted detection schemes for different applications, for example, to set corresponding security levels for various execution steps of an application, and to configure special detection tools for high-security execution steps to bind , and perform plug-in program detection, and the execution steps of low security level can be ignored. [0006...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Patents(China)
IPC IPC(8): G06F11/36
CPCG06F11/3688
Inventor 裴志军
Owner ALIBABA GRP HLDG LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Patsnap Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Patsnap Eureka Blog
Learn More
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic, Popular Technical Reports.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap|About US| Contact US: help@patsnap.com