一种检测进程访问行为的方法、系统、装置及介质
By configuring corresponding process access policies and permission declaration tables for each application, the problem of existing technologies being able to detect only one type of process is solved, enabling accurate detection of access behavior for each process and improving the security and detection efficiency of the client system.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- BEIJING TOPSEC NETWORK SECURITY TECH
- Filing Date
- 2022-09-19
- Publication Date
- 2026-07-17
AI Technical Summary
In existing technologies, due to limited client storage space, detection can only be performed on one type of process, making it impossible to accurately detect the access behavior of each process, which affects the security of process access behavior.
Configure corresponding process access policies for each application, refine the detection of process access behavior through permission declaration tables and query mapping tables, ensure that each process has the corresponding policy, and load the access policy loader and target function into the kernel for detection.
It improves the accuracy and efficiency of process access behavior detection, ensures that each process's access behavior has a clear strategy, and enhances the security and detection speed of the client system.
Smart Images
Figure CN115329334B_ABST