CN107122663B - 一种注入攻击检测方法及装置 - Google Patents
一种注入攻击检测方法及装置 Download PDFInfo
- Publication number
- CN107122663B CN107122663B CN201710297422.3A CN201710297422A CN107122663B CN 107122663 B CN107122663 B CN 107122663B CN 201710297422 A CN201710297422 A CN 201710297422A CN 107122663 B CN107122663 B CN 107122663B
- Authority
- CN
- China
- Prior art keywords
- executable file
- target process
- file
- determining
- injection
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
- G06F21/55—Detecting local intrusion or implementing counter-measures
- G06F21/56—Computer malware detection or handling, e.g. anti-virus arrangements
- G06F21/566—Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/03—Indexing scheme relating to G06F21/50, monitoring users, programs or devices to maintain the integrity of platforms
- G06F2221/033—Test or assess software
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Hardware Design (AREA)
- General Engineering & Computer Science (AREA)
- Software Systems (AREA)
- Theoretical Computer Science (AREA)
- Health & Medical Sciences (AREA)
- General Health & Medical Sciences (AREA)
- Virology (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Stored Programmes (AREA)
Abstract
Description
Claims (6)
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201710297422.3A CN107122663B (zh) | 2017-04-28 | 2017-04-28 | 一种注入攻击检测方法及装置 |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201710297422.3A CN107122663B (zh) | 2017-04-28 | 2017-04-28 | 一种注入攻击检测方法及装置 |
Publications (2)
Publication Number | Publication Date |
---|---|
CN107122663A CN107122663A (zh) | 2017-09-01 |
CN107122663B true CN107122663B (zh) | 2021-04-02 |
Family
ID=59726066
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN201710297422.3A Active CN107122663B (zh) | 2017-04-28 | 2017-04-28 | 一种注入攻击检测方法及装置 |
Country Status (1)
Country | Link |
---|---|
CN (1) | CN107122663B (zh) |
Families Citing this family (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN108197041B (zh) * | 2017-12-28 | 2021-09-28 | 北京奇虎科技有限公司 | 一种确定子进程的父进程的方法、设备及其存储介质 |
CN111753301B (zh) * | 2020-07-01 | 2024-04-09 | 深信服科技股份有限公司 | 一种无文件攻击检测方法、装置、电子设备和介质 |
CN113350799A (zh) * | 2021-05-26 | 2021-09-07 | 上海蛮犀科技有限公司 | 一种移动应用防修改器的安全防护方法 |
CN116661975B (zh) * | 2023-07-21 | 2023-10-13 | 天津卓朗昆仑云软件技术有限公司 | 进程运行控制方法、装置、电子设备及存储介质 |
Citations (7)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN1980237A (zh) * | 2005-12-09 | 2007-06-13 | 北京瑞星国际软件有限公司 | 识别访问网络的模块的方法及装置 |
CN101242279A (zh) * | 2008-03-07 | 2008-08-13 | 北京邮电大学 | 用于web***的自动化渗透性测试***和方法 |
CN101414278A (zh) * | 2008-12-01 | 2009-04-22 | 浙大网新科技股份有限公司 | 基于动态反编译技术的二进制应用程序调试方法 |
CN102368257A (zh) * | 2010-10-06 | 2012-03-07 | 微软公司 | 动态内容中的跨站点脚本阻止 |
CN104123489A (zh) * | 2014-07-02 | 2014-10-29 | 珠海市君天电子科技有限公司 | 可执行程序的监控方法和装置 |
CN104462968A (zh) * | 2014-12-16 | 2015-03-25 | 北京奇虎科技有限公司 | 恶意应用程序的扫描方法、装置和*** |
WO2016095489A1 (zh) * | 2014-12-18 | 2016-06-23 | 中兴通讯股份有限公司 | 一种可执行模块的提供、加载方法、终端、存储介质 |
Family Cites Families (10)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN101950339B (zh) * | 2010-09-14 | 2012-01-25 | 上海置水软件技术有限公司 | 一种电脑安全防护方法和*** |
US9473485B2 (en) * | 2011-03-21 | 2016-10-18 | Blue Cedar Networks, Inc. | Secure single sign-on for a group of wrapped applications on a computing device and runtime credential sharing |
US8997239B2 (en) * | 2011-03-31 | 2015-03-31 | Infosys Limited | Detecting code injections through cryptographic methods |
CN102750490B (zh) * | 2012-03-23 | 2014-10-22 | 南京邮电大学 | 一种基于协作免疫网络进化算法的病毒检测方法 |
CN102855274B (zh) * | 2012-07-17 | 2015-12-09 | 北京奇虎科技有限公司 | 一种可疑进程检测的方法和装置 |
US9063721B2 (en) * | 2012-09-14 | 2015-06-23 | The Research Foundation For The State University Of New York | Continuous run-time validation of program execution: a practical approach |
CN103929440B (zh) * | 2014-05-09 | 2017-10-17 | 国家电网公司 | 基于web服务器缓存匹配的网页防篡改装置及其方法 |
CN104091121B (zh) * | 2014-06-12 | 2017-07-18 | 上海交通大学 | 对Android重打包恶意软件的恶意代码的检测、切除和恢复的方法 |
CN104318160B (zh) * | 2014-10-29 | 2017-12-26 | 北京奇虎科技有限公司 | 查杀恶意程序的方法和装置 |
CN104392176A (zh) * | 2014-12-12 | 2015-03-04 | 北京奇虎科技有限公司 | 移动终端及其设备管理器权限的拦截方法 |
-
2017
- 2017-04-28 CN CN201710297422.3A patent/CN107122663B/zh active Active
Patent Citations (7)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN1980237A (zh) * | 2005-12-09 | 2007-06-13 | 北京瑞星国际软件有限公司 | 识别访问网络的模块的方法及装置 |
CN101242279A (zh) * | 2008-03-07 | 2008-08-13 | 北京邮电大学 | 用于web***的自动化渗透性测试***和方法 |
CN101414278A (zh) * | 2008-12-01 | 2009-04-22 | 浙大网新科技股份有限公司 | 基于动态反编译技术的二进制应用程序调试方法 |
CN102368257A (zh) * | 2010-10-06 | 2012-03-07 | 微软公司 | 动态内容中的跨站点脚本阻止 |
CN104123489A (zh) * | 2014-07-02 | 2014-10-29 | 珠海市君天电子科技有限公司 | 可执行程序的监控方法和装置 |
CN104462968A (zh) * | 2014-12-16 | 2015-03-25 | 北京奇虎科技有限公司 | 恶意应用程序的扫描方法、装置和*** |
WO2016095489A1 (zh) * | 2014-12-18 | 2016-06-23 | 中兴通讯股份有限公司 | 一种可执行模块的提供、加载方法、终端、存储介质 |
Non-Patent Citations (1)
Title |
---|
"基于Simhash的SQL注入漏洞检测技术研究";池水明等;《计算机时代》;20140315;第3-5页 * |
Also Published As
Publication number | Publication date |
---|---|
CN107122663A (zh) | 2017-09-01 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
CN110009334B (zh) | 一种构建梅克尔树、简单支付验证方法及装置 | |
CN107122663B (zh) | 一种注入攻击检测方法及装置 | |
TW201807576A (zh) | 對用於應用二進位碼的經更新的版本的目標應用功能的虛擬記憶體位址進行更新 | |
CN109062582B (zh) | 一种应用安装包的加密方法及装置 | |
US20230144818A1 (en) | Malicious software detection based on api trust | |
KR101685014B1 (ko) | 컴퓨터 시스템의 랜섬웨어 행위에 대한 선제적인 탐지 차단 방법 및 그 장치 | |
TWI554907B (zh) | Trojan horse detection method and device | |
CN111008034B (zh) | 一种补丁生成方法及装置 | |
US11675905B2 (en) | System and method for validating in-memory integrity of executable files to identify malicious activity | |
CN108898012B (zh) | 检测非法程序的方法和装置 | |
US11886350B2 (en) | System memory context determination for integrity monitoring and related techniques | |
CN114021115A (zh) | 恶意应用程序的检测方法、装置、存储介质及处理器 | |
CN109933986B (zh) | 恶意代码检测方法及装置 | |
Fu et al. | Data correlation‐based analysis methods for automatic memory forensic | |
CN106911635B (zh) | 一种检测网站是否存在后门程序的方法及装置 | |
CN114297630A (zh) | 恶意数据的检测方法、装置、存储介质及处理器 | |
CN112580066A (zh) | 一种数据保护方法及装置 | |
CN112445805A (zh) | 一种数据的查询方法及装置 | |
WO2024125108A1 (zh) | 移动端安全切面的按需开启方法及装置 | |
CN103713945A (zh) | 游戏的识别方法和装置 | |
CN108985096B (zh) | 一种Android SQLite数据库安全增强、安全操作方法以及装置 | |
Srivastava et al. | Detecting code injection by cross-validating stack and VAD information in windows physical memory | |
CN110659296A (zh) | 存储方法、装置、设备以及计算机可读介质 | |
CN111104669A (zh) | 破解检测方法、装置、***、服务器、终端及存储介质 | |
CN105975860B (zh) | 一种信任文件管理方法、装置及设备 |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PB01 | Publication | ||
PB01 | Publication | ||
SE01 | Entry into force of request for substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
CB02 | Change of applicant information | ||
CB02 | Change of applicant information |
Address after: Room 101 and 102, 1st floor, building 7, 219 Tianhua 2nd Road, high tech Zone, Chengdu, Sichuan 610094 Applicant after: Chengdu Bangbang Information Technology Consulting Service Co.,Ltd. Address before: No. 501, 5th floor, building 6, No. 599, shijicheng South Road, high tech Zone, Chengdu, Sichuan 610000 Applicant before: CHENGDU BANGBANG INFORMATION TECHNOLOGY Co.,Ltd. |
|
TA01 | Transfer of patent application right | ||
TA01 | Transfer of patent application right |
Effective date of registration: 20210311 Address after: 100083 rooms 1-3, 20 / F, block a, Tiangong building, No.30 Xueyuan Road, Haidian District, Beijing Applicant after: BEIJING BANGCLE TECHNOLOGY Co.,Ltd. Applicant after: Chengdu Bangbang Information Technology Consulting Service Co.,Ltd. Address before: Room 101 and 102, 1st floor, building 7, 219 Tianhua 2nd Road, high tech Zone, Chengdu, Sichuan 610094 Applicant before: Chengdu Bangbang Information Technology Consulting Service Co.,Ltd. |
|
GR01 | Patent grant | ||
GR01 | Patent grant | ||
TR01 | Transfer of patent right | ||
TR01 | Transfer of patent right |
Effective date of registration: 20211210 Address after: 100083 rooms 1-3, 20 / F, block a, Tiangong building, No.30 Xueyuan Road, Haidian District, Beijing Patentee after: BEIJING BANGCLE TECHNOLOGY Co.,Ltd. Address before: 100083 rooms 1-3, 20 / F, block a, Tiangong building, No.30 Xueyuan Road, Haidian District, Beijing Patentee before: BEIJING BANGCLE TECHNOLOGY Co.,Ltd. Patentee before: Chengdu Bangbang Information Technology Consulting Service Co.,Ltd. |