基于动态类调用序列的可信度判断方法及装置
By determining whether the call sequence of a dynamic class is in a whitelist when the Java Virtual Machine loads it, the problem of existing technologies being unable to prevent Java attacks with unknown vulnerabilities is solved, and real-time security protection and performance optimization of the Java system are achieved.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- QI AN XIN TECHNOLOGY GROUP INC
- Filing Date
- 2022-06-30
- Publication Date
- 2026-07-17
AI Technical Summary
Existing Java protection methods based on black rule matching can only protect against known vulnerabilities, and the large number of monitoring points required affects system performance, making it ineffective in preventing Java attacks targeting unknown vulnerabilities.
By determining whether the target class loaded by the Java Virtual Machine is a dynamic class and checking whether its call sequence is in the dynamic class call sequence whitelist, if not, the loading is intercepted and an alarm is generated. When generating the dynamic class call sequence whitelist, the source code of the business system is simulated to obtain a trusted call sequence.
It achieves real-time protection when dynamic classes are loaded by the Java Virtual Machine, preventing malicious dynamic class attacks, effectively responding to unknown vulnerabilities, and improving system security and performance.
Smart Images
Figure CN115292707B_ABST