Looking for breakthrough ideas for innovation challenges? Try Patsnap Eureka!

Program code execution behavior monitoring method and computer equipment

A technology of computer equipment and program code, applied in the monitoring method of program code execution behavior, the field of computer equipment

Pending Publication Date: 2021-08-17
HUAWEI TECH CO LTD
View PDF4 Cites 2 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

Since the program code does not need to be translated in the virtual execution environment, the efficiency of the system operation is high, but the program code can only be monitored at the system call level

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Program code execution behavior monitoring method and computer equipment
  • Program code execution behavior monitoring method and computer equipment
  • Program code execution behavior monitoring method and computer equipment

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0078] The technical solutions in the embodiments of the present application will be described below with reference to the accompanying drawings.

[0079] combine first figure 1 The computer device 100 to which the program monitoring method of the embodiment of the present application is applied will be described in detail.

[0080]A computing device is also called a computer system, including a hardware layer, an operating system layer running on the hardware layer, and an application layer running on the operating system layer. The hardware layer includes hardware such as processing unit, memory and memory control unit, and then the function and structure of the hardware will be described in detail. The operating system is any one or more computer operating systems that realize business processing through processes, for example, Linux operating system, Unix operating system, Android operating system, iOS operating system, or windows operating system. The application layer ...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention provides a program code monitoring method which comprises the steps that computer equipment executes a first code corresponding to a first program code in a virtual execution environment, the first code belongs to an external code, and the external code is a code called in the first program code except an internal code; the external code comprises a system code provided by an operating system of the computing equipment, and the internal code is a code of a process generated by the first program code; in the process of executing the first code, if the second code belongs to the internal code, before the second code is executed, the computer equipment switches the execution environment of the first program code into a simulation execution environment, and the second code is a code to be executed; the second code is executed in the simulated execution environment. According to the method, under the condition that the aim of monitoring the instruction level of the program code is achieved, the performance overhead is reduced, and the operation efficiency of the system is improved.

Description

technical field [0001] The present application relates to the field, and more specifically, relates to a method for monitoring program code execution behavior and computer equipment. Background technique [0002] With the development of computer technology, computer security has become the focus of attention. With the continuous development of advanced persistent threat (APT) attacks, advanced malicious codes are also changing with each passing day. Therefore, how to analyze a program code so as to determine whether the program code is a malicious program becomes a problem to be solved. [0003] The techniques for analyzing program code are mainly divided into static program analysis and dynamic program analysis. Static program analysis refers to the technology of analyzing the static features and functional modules of the program code without running the program code. Static program analysis techniques, for example, analyze the statistical characteristics of instructions...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Applications(China)
IPC IPC(8): G06F21/53G06F21/56
CPCG06F21/53G06F21/566G06F9/45516G06F21/54G06F21/74G06F2221/034
Inventor 袁劲枫陈甲
Owner HUAWEI TECH CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Patsnap Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Patsnap Eureka Blog
Learn More
PatSnap group products