Looking for breakthrough ideas for innovation challenges? Try Patsnap Eureka!

Method, storage medium, electronic device and system for preventing bad dll injection

A bad, function-injected technology, applied in digital data processing, instruments, calculations, etc., can solve problems such as client/program/software crashes, platform software leaks, hacking, etc., to improve experience, improve security, The effect of preventing crashes

Active Publication Date: 2022-04-08
WUHAN DOUYU NETWORK TECH CO LTD
View PDF5 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0003] However, when the DLL is called by different applications, it may be tampered with the connection by the program software, resulting in a bad link, or directly tampered with the link by a malicious program. The former may cause the client / program / software to crash, and the latter may cause hackers Intrusion, platform software is hijacked, user secrets are leaked

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Method, storage medium, electronic device and system for preventing bad dll injection
  • Method, storage medium, electronic device and system for preventing bad dll injection

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0056] An embodiment of the present invention provides a method for preventing bad DLL injection, which includes:

[0057] S1: Obtain a list of abnormal DLLs.

[0058] For software, it is impossible to run stably when it runs in different environments. The reason for the unstable operation of the software running in the Windows system is generally not the use of its own functions to run, but the abnormality that occurs when calling the DLL in the Windows system. For these abnormal DLLs, if it is necessary to prevent them from causing software instability, crashes, and intrusion, etc., further processing is required.

[0059] S2: traverse the DLL library in the Windows system to find the location of the abnormal DLL.

[0060] To handle the abnormal DLL, you must first find the location of the DLL. In Windows, its DLL is stored in the DLL library, so you can directly find the location of the abnormal DLL in the DLL library of the Windows system.

[0061] S3: Retrieve the abno...

Embodiment 2

[0078] An embodiment of the present invention provides a system for preventing bad DLL injection, which includes:

[0079] The interface module is used to obtain the abnormal DLL list;

[0080] The DLL retrieval module is used to traverse the DLL library in the Windows system to find the location of the abnormal DLL;

[0081] The function retrieval module is used to retrieve the abnormal DLL according to the location of the abnormal DLL, and obtain the position of the injected function in the abnormal DLL, and the injected function is a function of injecting the DLL to the client;

[0082] The Hook module is used to rewrite all injected functions in the abnormal DLL according to the position of the injected function in the abnormal DLL, and add a hook function in the injected function, and the hook function is used to monitor the DLL name injected by the injected function;

[0083] The monitoring module is used to compare the name of the DLL with a preset list of bad DLLs, an...

Embodiment 3

[0087] The third embodiment of the present invention provides a computer-readable storage medium, on which a computer program is stored. When the program is executed by a processor, the video recommendation method provided in any embodiment of the present invention is implemented. The method includes:

[0088] Obtain each watched video and each unwatched video of the target user within a preset time period, wherein the unwatched video includes a first unwatched video and a second unwatched video;

[0089] According to the collaborative filtering algorithm and each watched video, determine the candidate recommendation set from each first unwatched video;

[0090] Add the second unwatched video to the candidate recommendation set according to the preset adding rules, and determine each added recommendation set;

[0091] According to the user viewing information or video attribute information corresponding to each recommended video in each added recommendation set, and the user v...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention discloses a method, a storage medium, an electronic device and a system for preventing bad DLL injection, and relates to the field of Internet PC client application development. The method includes obtaining a list of abnormal DLLs. Traverse the DLL library in the Windows system to find the location of the abnormal DLL. The abnormal DLL is retrieved according to the location of the abnormal DLL, and the position of the injected function in the abnormal DLL is acquired, and the injected function is a function injected into the DLL to the client. According to the location of the injected function in the abnormal DLL, rewrite all the injected functions in the abnormal DLL, and add a hook function in the injected function, and the hook function is used to monitor the name of the DLL injected by the injected function. The DLL name is compared with the preset list of bad DLLs, and if the injected DLL is a bad DLL, the injection of the bad DLL is terminated. The invention can prevent the client running in Windows from being injected with a bad DLL, thereby preventing the client from crashing and being hacked.

Description

technical field [0001] The invention relates to the field of Internet PC client application development, in particular to a method, storage medium, electronic equipment and system for preventing bad DLL injection. Background technique [0002] The full English name of a DLL file is a Dynamic Link Library file, also known as an application extension, which is a software file. In the Windows system, for common or shared functions, if each software writes and stores them by itself, there will be a large number of duplicate functions. At the same time, it is not easy for Windows to manage these functions and even functions with the same code. In the Windows system, many applications are not a complete executable file, they have a part of the relatively independent dynamic link library, that is, the DLL file, when the program is executed, the corresponding DLL file will be called due to the dynamic link, And then assist the operation of the program. Therefore, one application m...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Patents(China)
IPC IPC(8): G06F21/56G06F21/57
CPCG06F21/562G06F21/57
Inventor 魏洪
Owner WUHAN DOUYU NETWORK TECH CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Patsnap Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Patsnap Eureka Blog
Learn More
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic, Popular Technical Reports.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap|About US| Contact US: help@patsnap.com