Processing method and device under condition of being hooked of function
A function and detection function technology, applied in the field of information security, can solve the problems of low system security, inability to obtain real operation results, etc., and achieve the effect of high system security
Active Publication Date: 2022-01-11
FEITIAN TECHNOLOGIES
View PDF8 Cites 0 Cited by
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
[0003] Under the iOS system, when the function to be called is hooked, the function logic will change. After the device calls the hooked function, the real running result cannot be obtained, and the system security is low.
Method used
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View moreImage
Smart Image Click on the blue labels to locate them in the text.
Smart ImageViewing Examples
Examples
Experimental program
Comparison scheme
Effect test
Embodiment Construction
[0026] In order to make the purpose, technical solution and advantages of the present application clearer, the embodiments of the present application will be further described in detail below in conjunction with the accompanying drawings.
[0027] When the following description refers to the accompanying drawings, the same numerals in different drawings refer to the same or similar elements unless otherwise indicated. The implementations described in the following exemplary embodiments do not represent all implementations consistent with this application. Rather, they are merely examples of apparatuses and methods consistent with aspects of the present application as recited in the appended claims.
[0028] In the description of the present application, it should be understood that the terms "first", "second" and so on are used for descriptive purposes only, and should not be understood as indicating or implying relative importance. Those of ordinary skill in the art can unde...
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More PUM
Login to View More Abstract
The embodiment of the invention discloses a processing method and device under a condition of being hooked of a function. The method comprises the steps of: carrying out hook detection on a to-be-called detected function through a user-defined hook detection function, and determining whether an inline hook of a target frame exists in the detected function or not; if the inline hook of the target framework exists in the detected function, obtaining an initial address of the detected function, and adding a first specified length to the initial address of the detected function to obtain a target address; traversing a memory occupied by a program where the detected function is located, and circularly searching a region address; if the region address is found, receiving the region address through a preset function; and calling the preset function of the region address, to execute function logic when the detected function is not hooked. By adopting the method provided by the invention, the original function logic of the detected function can still be executed under the condition that the detected function is hooked.
Description
technical field [0001] The present application relates to the field of information security, in particular to a processing method and device when a function is hooked. Background technique [0002] Hook technology is used to hook the target function in the program to change the original execution flow of the program. Before the system calls the target function, use the hook technology to replace the target function with a custom function, so that the program executes the logic of the custom function to achieve the purpose of "dropping" the function; the inline hook (inline hook) is to modify the instructions in the target function , use the jump instruction to change the instruction of the hook point, so as to achieve the purpose of hooking the target function. [0003] Under the iOS system, when the function to be called is hooked, the function logic will change. After the device calls the hooked function, the real running result cannot be obtained, and the system security...
Claims
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More Application Information
Patent Timeline
Login to View More Patent Type & Authority Applications(China)
IPC IPC(8): G06F21/52
CPCG06F21/52
Inventor 陆舟
Owner FEITIAN TECHNOLOGIES