11 results about "Hooking" patented technology

This application discloses a file security level checking method, apparatus, device, medium, and product based on Windows operating system API hooking, relating to the field of computer software applications. The method includes registering a callback function using a driver module; when the Windows operating system creates a process, the callback function sends the created process ID to a user-mode service module and receives a service completion message from the service module; within the service module, based on a DLL injection mechanism, the DLL injection program of the API hooking module is injected into the memory space of the created process; after the DLL injection program is injected, the API hooking module modifies the entry address of the target process's API and points this entry address to a custom hook function; the target process is the created process; when an application opens a file corresponding to the target process, the security level judgment logic of the hook function is called to determine whether the user's security level allows opening the file corresponding to the target process. This application avoids the problem of high-security file leakage.

A computer device that manages privilege delegation is disclosed. The computing device can modify a virtual method table to point to a hooking function associated with an agent plugin. The agent plugin can be configured to intercept requests relating to a file using the hooking function. The computing device can intercept a request in a user account of a logged-in user to execute therein a command on the file according to first privileges assigned thereto. The computing device can obtain information related to the request and forward the information to an agent service cooperating with an operating system. The computing device can determine whether to execute the command on the file in the user account according to second privileges different from the first privileges. The computing device can cause the command to be executed on the file in the user account according to the second privileges.

This application relates to an information attachment method, apparatus, computer device, computer-readable storage medium, and computer program product. The method includes: obtaining an initial session; the initial session containing a dynamic service pointer; if a first security service in the security services is in the initial session's first attachment state, determining the target memory of the initial session; the first security service is a service in the firewall participating in the initial session processing; pointing the dynamic service pointer in the initial session to the target memory, and attaching the service extension information of the first security service to the initial session; for the next first security service in the security services, re-executing the step of determining the target memory of the initial session if the first security service in the security services is in the initial attachment state, until the service extension information of the last first security service in the security services is attached to the initial session, thus obtaining the target session. This method can improve the concurrency performance of the firewall.

This application relates to an inline hooking method and apparatus for compiled languages. The method includes: responding to a received inline hooking request, determining the size of the target function to be inline hooked; determining whether the target function can be inline hooked based on the size of the target function and the difference between the address of the hook function and the address of the target function; a hook function, a function used to execute the functionality of the target function by calling a jump function; when it is determined that the target function can be inline hooked, copying the instruction code of the target function to a preset memory area, and revising the content of the copied instruction code to obtain the jump function of the target function; writing a target jump instruction at the beginning of the target function, and using the target jump instruction to redirect the call to the target function to the hook function. This method solves the problem that existing inline hooking methods are not applicable to compiled languages.

The invention relates to the technical field of malicious software protection, in particular to a malicious firmware vulnerability utilization detection system based on sandbox behavior analysis, which comprises a protocol analysis constraint establishment module for loading to-be-detected firmware according to a sandbox environment, configuring a register address range of a virtual network card and a virtual USB controller, generating a virtual peripheral protocol analysis tree, and establishing a virtual peripheral protocol analysis result; and traversing leaf nodes in the virtual peripheral protocol parse tree. According to the method, in combination with interrupt time sequence discrete analysis, the hidden interrupt hooking behavior can be recognized from the microscopic time dimension by continuously recording the instruction execution clock cycle number corresponding to the target interrupt vector and calculating the time-consuming window and the dispersion value, and the limitation that a traditional sandbox only pays attention to the function level is overcome; malicious codes hidden in a bottom layer are pulled out by using the time sequence side channel characteristics, so that the detection success rate and the false alarm suppression capability aiming at unknown vulnerability utilization and persistent attacks of firmware are improved, and the deep security threat of embedded equipment is perceived.

To provide a work management device capable of improving the safety of a worker.SOLUTION: A work management device 10 comprises: a sensor unit 13 that includes a first sensor 131 that is worn by a worker and acquires spatial information of an area surrounding the worker, and a second sensor 132 that acquires hooking information indicating a hooking state of a hook F of a lifeline R1 worn by the worker; a control unit 15 that executes a first determination process for determining whether or not a work site is a site where the worker is at risk of falling on the basis of the spatial information and a second determination process for determining whether or not the hook F is hooked to a hooking target R2 on the basis of the hooking information; and an output unit 14 that outputs notification information from the control unit 15 toward the worker when the control unit 15 determines that the work site is a site where the worker is at risk of falling and that the hook F is not hooked to the hooking target R2.SELECTED DRAWING: Figure 3

The invention provides a hook safety monitoring method based on high-altitude operation and electronic equipment, and the method comprises the steps: constructing a tower model according to the pre-collected point cloud data of a power transmission tower; determining a plurality of components in the tower model and component attributes of each component, wherein the component attributes comprise a hanging area or a non-hanging area; when the hook of the operator is in the hooking state, positioning information of the hook of the operator is determined, and the positioning information comprises position coordinates of the hook; according to the positioning information and the position information of each component, determining a target component which is currently hooked by the hook; and generating and outputting a hook monitoring result according to the component attribute of the target component. According to the method, whether the component currently hung by the hook is firm and safe or not is accurately determined through the pole tower model of the component and the real-time positioning information of the hook, an operator does not need to repeatedly confirm the hanging point, the mistaken hanging risk is reduced, and the falling accident caused by mistaken hanging of the hook is effectively avoided.

To provide a portable power tool that allows for an easily visible information display area without increasing the size of the machine. [Solution] The hook 30 is substantially L-shaped with a bent portion 31, and comprises a hook base 32 on the grip 11 side of the bent portion 31, and a hooking portion 36 on the tip side of the bent portion 31. When viewed from the direction of extension of the hooking portion 36, with the bent portion 31 side being the upward direction, the tip direction of the hooking portion 36 being the downward direction, the direction perpendicular to the upward and downward direction and when viewed from the direction of extension of the hook base 32, with the bent portion 31 side being the forward direction, the opposite direction of the forward direction being the backward direction, and the direction perpendicular to both the upward and downward direction and the forward and backward direction being the left and right direction, at least a part of the hook base 32 extends diagonally in a direction that forms an acute angle with respect to the direction of extension of the hooking portion 36.

This application discloses a user-space program inline hooking method and medium based on the Loongarch architecture, mainly relating to the field of user-space program technology. It addresses the problems of existing solutions being unable to hook functions of the application itself or functions loaded by static libraries based on the Loongarch architecture, unable to hook the behavior of applications calling ordinary library functions, and heavily reliant on the system kernel version. The method includes: jumping to the second-level jump board of the hook module through a preset first-level jump board assembly code; saving the current execution context through the second-level jump board, and executing the preset unified hook logic execution function; calling a user-defined function through the preset unified hook logic execution function; after executing the user-defined function, jumping back to the second-level jump board, jumping to the repaired assembly instruction code, and jumping to an offset of 6 bytes from the beginning of the hooked function.

The application discloses a cargo automatic unhooking method and system based on machine vision technology, which comprises data acquisition; data preprocessing, wherein disturbance terms of various factors are respectively established according to various relevant data and environment relevant data of hooks; a hook coefficient model and a pressure coefficient model fusing the relevant disturbance terms are constructed; instructions are generated; hook coefficient threshold values, pressure coefficient threshold values and double-coefficient joint threshold values are set, a double-coefficient joint decision mechanism is used to judge whether the unhooking condition is met, and a warning signal is sent if the unhooking condition is not met; different processing tasks are triggered according to the unhooking instructions or the warning signal; the method and the system can comprehensively evaluate unhooking composite risks, break through the dependence of traditional mechanical positioning on standard cargo types and operation experience, realize intelligent unhooking decision under complex environment and multi-dimensional disturbance, have high cargo type expansion rate, and guarantee unhooking safety; and the unhooking method can realize automatic unhooking and break through the "last one kilometer" breakpoint of port intelligent construction.

The utility model discloses a quick-release lock catch for a side cover of a computer case. The quick-release lock catch comprises a sliding piece and a lock hook, the side cover can slide forwards into the side edge of the case body to block the side opening of the side case body, the side cover can also slide backwards out of the side edge of the case body to open the side opening, the rear edge of the side cover forms a flange, and when the side cover slides forwards into the side edge of the case body, the flange abuts against a rear end plate of the case body; the lock hook is fixedly arranged on the flanging and extends forwards from the flanging, and the tail end of the lock hook is bent to form a hook; the sliding piece is installed on a rear end plate of the case body in a sliding mode, a hooking portion is formed on the sliding piece, one end of the sliding piece in a sliding path is an unlocking position, the other end of the sliding piece in the sliding path is a locking position, and when the side cover slides forwards into the side edge of the case body and the sliding piece slides to the locking position, the hooking portion enters the hook and is hooked by the hook, and backward sliding of the side cover is locked. And when the sliding piece slides to the unlocking position, the hooking part retreats from the hook, and backward sliding of the side cover is unlocked. According to the utility model, the side cover can be conveniently locked and unlocked.