CN114721787A - Operation event processing method and device, electronic equipment and storage medium - Google Patents
Operation event processing method and device, electronic equipment and storage medium Download PDFInfo
- Publication number
- CN114721787A CN114721787A CN202210308723.2A CN202210308723A CN114721787A CN 114721787 A CN114721787 A CN 114721787A CN 202210308723 A CN202210308723 A CN 202210308723A CN 114721787 A CN114721787 A CN 114721787A
- Authority
- CN
- China
- Prior art keywords
- object operation
- event
- operation event
- obtaining
- program
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000003672 processing method Methods 0.000 title claims abstract description 22
- 230000004044 response Effects 0.000 claims abstract description 22
- 238000001514 detection method Methods 0.000 claims abstract description 9
- 230000006399 behavior Effects 0.000 claims description 78
- 238000000034 method Methods 0.000 claims description 50
- 238000012545 processing Methods 0.000 claims description 22
- 238000004590 computer program Methods 0.000 claims description 13
- 238000004891 communication Methods 0.000 description 15
- 230000006870 function Effects 0.000 description 9
- 238000010586 diagram Methods 0.000 description 7
- 230000008569 process Effects 0.000 description 7
- 230000001960 triggered effect Effects 0.000 description 6
- 230000009471 action Effects 0.000 description 3
- 238000012986 modification Methods 0.000 description 3
- 230000004048 modification Effects 0.000 description 3
- 230000003287 optical effect Effects 0.000 description 3
- 238000013459 approach Methods 0.000 description 2
- 239000011230 binding agent Substances 0.000 description 2
- 238000004364 calculation method Methods 0.000 description 2
- 238000005516 engineering process Methods 0.000 description 2
- 230000003993 interaction Effects 0.000 description 2
- 238000003491 array Methods 0.000 description 1
- 238000013473 artificial intelligence Methods 0.000 description 1
- 238000013475 authorization Methods 0.000 description 1
- 230000005540 biological transmission Effects 0.000 description 1
- 230000001413 cellular effect Effects 0.000 description 1
- 239000003795 chemical substances by application Substances 0.000 description 1
- 238000010276 construction Methods 0.000 description 1
- 230000007547 defect Effects 0.000 description 1
- 238000013461 design Methods 0.000 description 1
- 238000011161 development Methods 0.000 description 1
- 230000006872 improvement Effects 0.000 description 1
- 239000004973 liquid crystal related substance Substances 0.000 description 1
- 238000010801 machine learning Methods 0.000 description 1
- 238000007726 management method Methods 0.000 description 1
- 239000013307 optical fiber Substances 0.000 description 1
- 230000002085 persistent effect Effects 0.000 description 1
- 239000004065 semiconductor Substances 0.000 description 1
- 230000001953 sensory effect Effects 0.000 description 1
- 238000006467 substitution reaction Methods 0.000 description 1
- 230000000007 visual effect Effects 0.000 description 1
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/46—Multiprogramming arrangements
- G06F9/466—Transaction processing
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/30—Monitoring
- G06F11/3003—Monitoring arrangements specially adapted to the computing system or computing system component being monitored
- G06F11/302—Monitoring arrangements specially adapted to the computing system or computing system component being monitored where the computing system component is a software system
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Physics & Mathematics (AREA)
- Software Systems (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Computing Systems (AREA)
- Mathematical Physics (AREA)
- Quality & Reliability (AREA)
- User Interface Of Digital Computer (AREA)
Abstract
The disclosure provides an operation event processing method and device, electronic equipment and a storage medium, and relates to the technical field of computers, in particular to the technical field of software. The specific implementation scheme is as follows: in response to the detection that the object aims at least one object operation event of the target application program, intercepting the at least one object operation event to obtain object operation event information; and obtaining an object operation behavior record according to the object operation event information.
Description
Technical Field
The present disclosure relates to the field of computer technology, and more particularly, to the field of software technology. In particular, the invention relates to an operation event processing method, an operation event processing device, an electronic device and a storage medium.
Background
With the development of computer technology, computer software technology has also been developed. For example, various types of Applications (APPs) created based on computer software technology may be installed in an electronic device to provide various functions to an object.
The object may generate an object operation event during the use of the application. For example, the object manipulation event may include a click event, an input event, a selection event, or a slide event.
Disclosure of Invention
The disclosure provides an operation event processing method and device, an electronic device and a storage medium.
According to an aspect of the present disclosure, there is provided an operation event processing method, including: in response to the detection that the object aims at least one object operation event of the target application program, intercepting the at least one object operation event to obtain object operation event information; and obtaining an object operation behavior record according to the object operation event information.
According to another aspect of the present disclosure, there is provided an operation event processing apparatus including: the first obtaining module is used for intercepting at least one object operation event in response to the detection that the object aims at the at least one object operation event of the target application program to obtain object operation event information; and the second obtaining module is used for obtaining the object operation behavior record according to the object operation event information.
According to another aspect of the present disclosure, there is provided an electronic device including: at least one processor; and a memory communicatively coupled to the at least one processor; the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor to enable the at least one processor to perform the method of the present disclosure.
According to another aspect of the present disclosure, there is provided a non-transitory computer readable storage medium having stored thereon computer instructions for causing the computer to perform the method of the present disclosure.
According to another aspect of the present disclosure, a computer program product is provided, comprising a computer program which, when executed by a processor, implements the method of the present disclosure.
It should be understood that the statements in this section are not intended to identify key or critical features of the embodiments of the present disclosure, nor are they intended to limit the scope of the present disclosure. Other features of the present disclosure will become apparent from the following description.
Drawings
The drawings are included to provide a better understanding of the present solution and are not to be construed as limiting the present disclosure. Wherein:
fig. 1 schematically illustrates an exemplary system architecture to which the operational event processing method and apparatus may be applied, according to an embodiment of the present disclosure;
FIG. 2 schematically illustrates a flow diagram of an operational event processing method according to an embodiment of the present disclosure;
FIG. 3 schematically illustrates an example schematic diagram of an operational data processing procedure in accordance with an embodiment of the disclosure;
FIG. 4 schematically shows a block diagram of an operational event processing apparatus according to an embodiment of the present disclosure; and
fig. 5 schematically shows a block diagram of an electronic device adapted to implement the operational event handling method according to an embodiment of the present disclosure.
Detailed Description
Exemplary embodiments of the present disclosure are described below with reference to the accompanying drawings, in which various details of the embodiments of the disclosure are included to assist understanding, and which are to be considered as merely exemplary. Accordingly, those of ordinary skill in the art will recognize that various changes and modifications of the embodiments described herein can be made without departing from the scope and spirit of the disclosure. Also, descriptions of well-known functions and constructions are omitted in the following description for clarity and conciseness.
The object operation behavior record of the object can be obtained by recording the object operation event generated by the object in the process of using the application program, so that the problem of the object in the process of using the application program can be discovered by playing back the object operation behavior record in the following process, and the application program can be improved more specifically to optimize the application program.
The recording of the object operation event may be achieved in the following manner.
One way is to acquire the object operation event with the related event acquisition instruction in the case where the recording program has the Root (i.e., Root) authority.
Another approach is to record the object operation event returned by the auxiliary function (i.e., access Service).
Another approach is to record object operation events using a modified ROM (Read-Only Memory). The ROM may be the product of source code compilation.
Based on the above, for one mode, the recording needs to be realized by granting the root authority. For the implementation with the auxiliary function, the object operation event recorded based on the auxiliary function is sent by the application program operated by the object. If the operated application uses a custom layout, that is, it is not implemented using native controls but implemented by new controls rewritten by the developer, the developer does not start auxiliary functions for object operation events due to the rewritten controls, and therefore, it is difficult for the auxiliary functions to acquire all object operation events. For the mode realized by using the modified ROM, the source code needs to be modified, the electronic equipment used by the object needs to be refreshed, and the use safety of the object is influenced.
To this end, the application proposes an operation event processing scheme. Namely, under the condition that at least one object operation event of the object aiming at the target application program is detected, the at least one object operation event is intercepted to obtain the object operation event information, and then the object operation behavior record is obtained according to the object operation event information, so that the complete object operation behavior record is obtained under the condition that the ROM is not modified and the root authority is not granted.
Fig. 1 schematically illustrates an exemplary system architecture to which the operation event processing method and apparatus may be applied, according to an embodiment of the present disclosure.
It should be noted that fig. 1 is only an example of a system architecture to which the embodiments of the present disclosure may be applied to help those skilled in the art understand the technical content of the present disclosure, and does not mean that the embodiments of the present disclosure may not be applied to other devices, systems, environments or scenarios. For example, in another embodiment, an exemplary system architecture to which the operational event processing method and apparatus may be applied may include a terminal device, a network, and a server, the network serving to provide a medium for a communication link between the terminal device and the server. The network may include various connection types, such as wired and/or wireless communication links, and so forth.
As shown in fig. 1, a system architecture 100 according to this embodiment may include an electronic device 101. The electronic device 101 may be provided with a listener 1010 and a recorder 1011. In addition, the listener 1010 and the recorder 1011 may be provided on different electronic devices. For example, the listener 1010 is set to the first electronic device. The recording program 1011 is provided on the second electronic device. The electronic device 101 may be a terminal device or a server.
Various communication client applications can be installed on the terminal equipment. For example, at least one of a knowledge reading class application, a web browser application, a search class application, an instant messaging tool, a mailbox client, social platform software, and the like (by way of example only).
The terminal device may be a variety of electronic devices having a display screen and supporting web browsing, including but not limited to smart phones, tablets, laptop portable computers, desktop computers, and the like.
The server may be various types of servers that provide various services. For example, the Server may be a cloud Server, which is also called a cloud computing Server or a cloud host, and is a host product in a cloud computing service system, so as to solve the defects of high management difficulty and weak service extensibility in a conventional physical host and a VPS service (Virtual Private Server). The server may also be a server of a distributed system, or a server incorporating a blockchain.
The listener 1010 may intercept at least one object operation event of the object for the target application in response to detecting the object operation event, to obtain object operation event information.
The listener 1010 transmits the object operation actual information to the recorder 1011.
The recording program 1011 obtains a record of the operation behavior of the object according to the operation event information of the object.
It should be understood that the number of electronic devices in fig. 1 is merely illustrative. There may be any number of electronic devices, as desired for implementation.
It should be noted that the sequence numbers of the respective operations in the following methods are merely used as representations of the operations for description, and should not be construed as representing the execution order of the respective operations. The method need not be performed in the exact order shown, unless explicitly stated.
Fig. 2 schematically shows a flow chart of an operational event processing method according to an embodiment of the present disclosure.
As shown in FIG. 2, the method 200 includes operations S210-S220.
In operation S210, in response to detecting that the object is directed to at least one object operation event of the target application, intercepting the at least one object operation event, and obtaining object operation event information.
In operation S220, an object operation behavior record is obtained according to the object operation event information.
According to an embodiment of the present disclosure, the object may include a user. The target Application (APP) may be various types of applications. An object operational event may refer to an operational event that an object triggers during use of a target application. The object manipulation event may include a click event, an input event, a selection event, or a slide event. The click event may include a single click event or a double click event.
According to an embodiment of the present disclosure, the object operation event information may include related information for describing the object operation event. The object operation event information may include at least one of: operating time, event parameters and object identification.
According to an embodiment of the present disclosure, the object operation behavior record may refer to a record describing an operation behavior generated by an object using a target application within a predetermined period of time. The operational behavior may include at least one of: click behavior, input behavior, selection behavior, and slide behavior. Object manipulation events can be played back according to the object manipulation behavior record. In addition, the potential behavior of the object can be determined according to the operation behavior record of the object.
According to an embodiment of the present disclosure, operation S210 may be performed by a listener. Operation S220 may be performed by the recording program. That is, the listener may intercept at least one object operation event to obtain object operation event information when at least one object operation event of the object for the target application is detected. The recording program can integrate the information of the object operation events to obtain the record of the object operation behaviors when the recording event of the operation behaviors aiming at the object is detected. The recording program can realize the operation of obtaining the object operation behavior record under the condition that the root authority is not granted.
According to the embodiment of the disclosure, under the condition that at least one object operation event of the object aiming at the target application program is detected, the at least one object operation event is intercepted to obtain the object operation event information, and then the object operation behavior record is obtained according to the object operation event information, so that the complete object operation behavior record is obtained under the condition that the ROM is not modified and the root authority is not granted.
According to the embodiment of the disclosure, obtaining the object operation behavior record according to the object operation event information may include the following operations.
And responding to the detected operation behavior recording event aiming at the object, and obtaining an object operation behavior record according to the object operation event information.
According to an embodiment of the present disclosure, an operation behavior recording event may refer to an event that needs to be recorded for an object operation event. The operation behavior recording event may be generated in case that the operation behavior recording control is detected to be triggered. Alternatively, the operational behavior recording event may be generated upon detecting that the operational behavior recording program is triggered.
According to an embodiment of the present disclosure, operation S210 may include the following operations.
And intercepting at least one object operation event while at least one object operation event is sent to the target view to obtain object operation event information. The object operation event is an operation event of an object for a target application program. The target view is a view for responding to an object manipulation event.
According to embodiments of the present disclosure, a View (i.e., View) may be an abstraction of a control of an interface layer. The view may characterize the control. The view may be used to respond to operational events.
According to an embodiment of the present disclosure, an event-centric (i.e., EventHub) program may be utilized to listen for at least one object operation event of an object with respect to a target application. An event reading (i.e., InputReader) program is utilized to obtain at least one object operation event. For example, getEvents () of the EventHub program may be called by a persistent loop thread (i.e., loopOnce ()) in the InputReader program to obtain at least one object operation event. At least one object operation event is sent to an event issuing (i.e., ViewRootImpl) program using an event dispatching (i.e., InputDispatcher) program. The event issuing program may include an object operation event issuing program for processing each object operation event. The object operation event can be sent to the view corresponding to each of the at least one object operation event by using the event issuing program. And responding to the object operation event corresponding to the view by using the view.
According to the embodiment of the disclosure, at least one object operation event can be intercepted to obtain object operation event information while the object operation event is detected to be sent to the target view.
According to the embodiment of the disclosure, by intercepting at least one object operation event while the at least one object operation event is sent to the target view, a complete object operation behavior record can be obtained without modifying a ROM and being granted root authority.
According to the embodiment of the disclosure, intercepting at least one object operation event to obtain object operation event information while the at least one object operation event is sent to the target view may include the following operations.
And intercepting at least one object operation event to obtain object operation event information in response to detecting that the object operation event issuing program is executed.
According to the embodiment of the disclosure, the interception operation aiming at least one object operation event can be triggered and executed under the condition that the object operation event issuing program is detected to be executed, so that the object operation event information is obtained.
According to the embodiment of the disclosure, in response to detecting that the object operation event issuing program is executed, intercepting at least one object operation event to obtain object operation event information, which may include the following operations.
And the monitoring program intercepts at least one object operation event to obtain object operation event information in response to the fact that the object operation event issuing program is detected to be executed. The listener is implemented based on a hook policy.
According to an embodiment of the present disclosure, a Hook (i.e., Hook) policy may refer to a policy for injecting object code in a method of a predetermined program execution, and in case the method of the predetermined program is executed, may trigger the object code to be executed. The object code may include code related to intercepting at least one object operational event. The hooking policy may include one of: a reflection and dynamic agent based hooking policy, a JNI (Java Native Interface) based hooking policy, an Xposed framework based hooking policy, a GOT (i.e., global notation) based hooking policy, and an Inline based hooking policy. The hooking policy may be determined according to actual business requirements, and is not limited herein. For example, the hooking policy may be an Xposed framework-based hooking policy.
According to an embodiment of the present disclosure, the object manipulation event issuing program may refer to a program for transmitting an object manipulation event to a view for responding to the object manipulation event.
According to an embodiment of the present disclosure, the listener may be obtained based on a hook policy according to the object code and the event delivery program. The monitoring program can be utilized to intercept at least one object operation event to obtain object operation event information in response to detecting that the object operation event issuing program is executed.
According to the embodiment of the disclosure, at least one object operation event is intercepted by the monitor based on the hook policy to obtain the object operation event information, so that a complete object operation behavior record can be obtained without modifying the ROM and being granted with root authority.
According to an embodiment of the present disclosure, the above operation event processing method may further include the following operations.
And determining an object operation event issuing program related to the object operation event from the event issuing programs. And injecting the target code into the object operation event issuing program to obtain the monitoring program. The object code includes code associated with intercepting at least one object operation event.
According to an embodiment of the present disclosure, the object operation event may include one of: click events, slide events, selection events, and input events. The event delivery procedure may include an object operation event delivery procedure. The object operation event issuing program may include one of: an object operation event issuing program corresponding to the click event, an object operation event issuing program corresponding to the slide event, an object operation event issuing program corresponding to the selection event, and an object operation event issuing program corresponding to the input event.
For example, the object operation event launcher corresponding to the click event may be a processPointevent method in the event launcher. The processProcessPointerEvent method may be used to implement the issuing of click action events to the corresponding views. The object operation event issuer corresponding to the slide event may include a processKeyEvent method in the event issuer. The processKeyEvent method may be used to implement the issuing of sliding events to the corresponding views.
According to the embodiment of the disclosure, the event issuing program can be analyzed, and the object operation event issuing program corresponding to at least one object operation event can be determined. For the object operation event, the object code corresponding to the object operation event may be injected into the object operation event issuing program corresponding to the object operation event, so as to obtain the monitoring program corresponding to the object operation event. And obtaining the monitor program according to the monitor program corresponding to the at least one object operation event.
According to an embodiment of the present disclosure, the above operation event processing method may further include the following operations.
And the monitoring program sends object operation event information to the recording program.
According to an embodiment of the present disclosure, operation S220 may include the following operations.
And the recording program responds to the detected operation behavior recording event aiming at the object and obtains an object operation behavior record according to the object operation event information.
According to an embodiment of the present disclosure, the listener may transmit the object operation event information to the recorder after obtaining the object operation event information. The recording program may process the object operation event information to obtain an object operation behavior record when detecting that the operation behavior recording event is triggered.
According to the embodiment of the disclosure, the object operation event information is acquired by the monitor, and the monitor sends the object operation event information to the recording program, so that under the condition that the system is not modified by the ROM and the recording program is not granted with root authority, a complete object operation behavior record can be obtained.
According to an embodiment of the present disclosure, the listener transmitting the object operation event information to the recorder may include the following operations.
And the monitoring program sends object operation event information to the recording program by using a cross-process communication strategy.
According to an embodiment of the present disclosure, a cross-Process Communication (IPC) policy may refer to a policy for implementing Communication between different programs. The cross-process communication policy may include a Binder policy.
According to the embodiment of the disclosure, the listener can send object operation event information to the recorder by using the Binder policy.
According to an embodiment of the present disclosure, the object operation event information includes an operation time and an event parameter of at least one object operation event.
According to the embodiment of the disclosure, obtaining the object operation behavior record according to the object operation event information may include the following operations.
And determining an operation interval between two adjacent object operation events according to the operation time of at least one object operation event. And obtaining an object operation behavior record according to an operation interval between two adjacent object operation events and the event parameter of at least one object operation event.
According to an embodiment of the present disclosure, the operation time may refer to an occurrence time of an object operation event. The event parameters may include location parameters. In addition, the object operation event information may further include an object identification. The location parameter may be used to characterize a location of an operational behavior occurrence in the object operational event. The location parameters may include coordinate parameters. For example, the location parameters of the click event may include a first abscissa parameter and a first ordinate parameter. The position parameters of the sliding event may include a start time position parameter and an end time position parameter. The position parameter of the start time may include a second abscissa parameter and a second ordinate parameter. The position parameter of the end time may include a third abscissa parameter and a third ordinate parameter.
According to the embodiment of the disclosure, at least one object operation event corresponding to the same object identification can be determined. And determining an operation interval between two adjacent object operation events and a position parameter of each object operation event according to the operation time of each object operation event to obtain an object operation behavior record. The object operational behavior record may include a respective location parameter of the at least one object operational event and an operational interval of the at least one object operational event with respect to each other.
For example, the at least one object manipulation event may include a click event and a slide event. The operation time of the click event is T1. The location parameter for the click event is (x, y). The operating time of the slip event is T2. The position parameter of the sliding event comprises (x) of the starting time1,y1) And (x) at the end of time2,y2). Can determine T1And T2The operating interval therebetween is (T)2-T1). The object operation behavior record comprises the following contents of' clicking event occurring in (x, y) and waiting for operation interval (T)2-T1) Then, in (x)1,y1) And (x)2,y2) A slip event occurs.
According to an embodiment of the present disclosure, the above operation event processing method may further include the following operations.
And in response to detecting the operation behavior playback event aiming at the object, playing back at least one object operation event according to the object operation behavior record.
According to an embodiment of the present disclosure, an operation behavior playback event may refer to an event that requires playback of an object operation event. An operational behavior playback event may be generated upon detecting that the operational behavior playback control is triggered. Alternatively, the operational behavior recording event may be generated upon detecting that the operational behavior playback program is triggered. The playback operation may be performed using a recording program.
According to the embodiment of the disclosure, by playing back at least one object operation event, the problems of the object in the process of using the target application program can be found in time, and the target application program is improved more specifically so as to optimize the target application program.
The operation event processing method according to the embodiment of the present disclosure is further described with reference to fig. 3.
FIG. 3 schematically shows an example schematic of an operational event handling process according to an embodiment of the disclosure.
As shown in fig. 3, in 300, at least one object manipulation event may include a click event 301 and a slide event 302.
The event center 303 can be utilized to listen for object click events 301 and slide events 302 for the target application. The click event 301 and the slide event 302 are acquired by the event reader 304. The click event 301 and the slide event 302 are sent to the event issuing program 306 by the event distribution program 305. The event issuing program 306 may include an object operation event issuing program 3060 for processing the click event 301 and an object operation event issuing program 3061 for processing the slide event 302. The object operation event can be sent to the view 307 corresponding to each of the click event 301 and the slide event 302 by the event issuing program 306. The view 307 is utilized to respond to object manipulation events corresponding to the view 307.
The object operation event issuer corresponding to the click event may be a processPointerEvent method in the event issuer. The processProcessPointerEvent method may be used to implement the issuing of click action events to the corresponding views. The object operation event issuer corresponding to the slide event may include a processKeyEvent method in the event issuer. The processKeyEvent method may be used to implement the issuing of a slide event to the corresponding view.
For the click event 301, the object code 308 corresponding to the click event 301 and the slide event 302 may be injected into the object operation event issuing program 3060 corresponding to the click event 301 and the object operation event issuing program 3061 corresponding to the slide event 302, so as to obtain the listener 309.
The listener 309 may intercept the click event 301 and the slide event 302 in response to detecting the click event 301 and the slide event 302 of the object for the target application, and obtain object operation event information. The listener 309 sends the object operation actual information to the recorder 310. The recording program 310 obtains the record of the operation behavior of the object according to the information of the operation event of the object.
In the technical scheme of the disclosure, the collection, storage, use, processing, transmission, provision, disclosure and other processing of the personal information of the related user are all in accordance with the regulations of related laws and regulations and do not violate the good customs of the public order.
In the technical scheme of the disclosure, before the personal information of the user is acquired or collected, the authorization or the consent of the user is acquired.
The above is only an exemplary embodiment, but not limited thereto, and other operation event processing methods known in the art may be included as long as it can be realized that a complete object operation behavior record is obtained without modifying the ROM and being granted with root rights.
Fig. 4 schematically shows a block diagram of an operational event processing apparatus according to an embodiment of the present disclosure.
As shown in fig. 4, the operation event processing apparatus 400 may include a first obtaining module 410 and a second obtaining module 420.
The first obtaining module 410 is configured to intercept at least one object operation event of the object for the target application in response to detecting that the object is directed to the at least one object operation event, so as to obtain object operation event information.
The second obtaining module 420 is configured to obtain an object operation behavior record according to the object operation event information.
According to an embodiment of the present disclosure, the first obtaining module 410 may include a first obtaining submodule.
The first obtaining submodule is used for intercepting at least one object operation event to obtain object operation event information when the at least one object operation event is sent to the target view. The object operation event is an operation event of the object aiming at the target application program. The target view is a view for responding to an object manipulation event.
According to an embodiment of the present disclosure, the first obtaining sub-module may include an obtaining unit.
And the obtaining unit is used for intercepting at least one object operation event to obtain object operation event information in response to the fact that the object operation event issuing program is detected to be executed.
According to an embodiment of the present disclosure, the obtaining unit may include an obtaining subunit.
And the acquisition subunit is used for intercepting at least one object operation event by the monitoring program in response to the detection that the object operation event issuing program is executed, so as to obtain the object operation event information. The listener is implemented based on a hook policy.
According to an embodiment of the present disclosure, the operation event processing apparatus 400 may further include a determining module and a third obtaining module.
And the determining module is used for determining the object operation event issuing program related to the object operation event from the event issuing programs.
And the third obtaining module is used for injecting the target code into the object operation event issuing program to obtain the monitoring program. The object code includes code associated with intercepting at least one object operation event.
According to an embodiment of the present disclosure, the operation event processing apparatus 400 may further include a sending module.
And the sending module is used for sending the object operation event information to the recording program by the monitoring program.
According to an embodiment of the present disclosure, the second obtaining module 420 may include a second obtaining submodule.
And the second obtaining submodule is used for responding to the operation behavior recording event aiming at the object detected by the recording program and obtaining an object operation behavior record according to the object operation event information.
According to an embodiment of the present disclosure, the object operation event information includes an operation time and an event parameter of at least one object operation event.
According to the embodiment of the disclosure, obtaining the object operation behavior record according to the object operation event information may include the following operations.
And determining an operation interval between two adjacent object operation events according to the operation time of at least one object operation event. And obtaining an object operation behavior record according to an operation interval between two adjacent object operation events and the event parameter of at least one object operation event.
According to an embodiment of the present disclosure, the operation event processing apparatus 400 may further include a playback module.
And the playback module is used for responding to the detection of the operation behavior playback event aiming at the object and playing back at least one object operation event according to the object operation behavior record.
The present disclosure also provides an electronic device, a readable storage medium, and a computer program product according to embodiments of the present disclosure.
According to an embodiment of the present disclosure, an electronic device includes: at least one processor; and a memory communicatively coupled to the at least one processor; wherein the memory stores instructions executable by the at least one processor to enable the at least one processor to perform the method as described above.
According to an embodiment of the present disclosure, a non-transitory computer readable storage medium having stored thereon computer instructions for causing a computer to perform the method as described above.
According to an embodiment of the disclosure, a computer program product comprising a computer program which, when executed by a processor, implements the method as described above.
Fig. 5 schematically shows a block diagram of an electronic device adapted to implement the operational event processing method according to an embodiment of the present disclosure. Electronic devices are intended to represent various forms of digital computers, such as laptops, desktops, workstations, personal digital assistants, servers, blade servers, mainframes, and other appropriate computers. The electronic device may also represent various forms of mobile devices, such as personal digital processing, cellular phones, smart phones, wearable devices, and other similar computing devices. The components shown herein, their connections and relationships, and their functions, are meant to be examples only, and are not meant to limit implementations of the disclosure described and/or claimed herein.
As shown in fig. 5, the electronic device 500 includes a computing unit 501, which can perform various appropriate actions and processes according to a computer program stored in a Read Only Memory (ROM)502 or a computer program loaded from a storage unit 508 into a Random Access Memory (RAM) 503. In the RAM 503, various programs and data required for the operation of the electronic apparatus 500 can also be stored. The calculation unit 501, the ROM 502, and the RAM 503 are connected to each other by a bus 504. An input/output (I/O) interface 505 is also connected to bus 504.
A number of components in the electronic device 500 are connected to the I/O interface 505, including: an input unit 506 such as a keyboard, a mouse, or the like; an output unit 507 such as various types of displays, speakers, and the like; a storage unit 508, such as a magnetic disk, optical disk, or the like; and a communication unit 509 such as a network card, modem, wireless communication transceiver, etc. The communication unit 509 allows the electronic device 500 to exchange information/data with other devices through a computer network such as the internet and/or various telecommunication networks.
The computing unit 501 may be a variety of general-purpose and/or special-purpose processing components having processing and computing capabilities. Some examples of the computing unit 501 include, but are not limited to, a Central Processing Unit (CPU), a Graphics Processing Unit (GPU), various dedicated Artificial Intelligence (AI) computing chips, various computing units running machine learning model algorithms, a Digital Signal Processor (DSP), and any suitable processor, controller, microcontroller, and so forth. The calculation unit 501 executes the respective methods and processes described above, such as the operation event processing method. For example, in some embodiments, the operational event processing methods may be implemented as a computer software program tangibly embodied in a machine-readable medium, such as storage unit 508. In some embodiments, part or all of the computer program may be loaded and/or installed onto the electronic device 500 via the ROM 502 and/or the communication unit 509. When the computer program is loaded into the RAM 503 and executed by the computing unit 501, one or more steps of the operational event processing method described above may be performed. Alternatively, in other embodiments, the computing unit 501 may be configured to perform the operational event processing method by any other suitable means (e.g., by means of firmware).
Various implementations of the systems and techniques described here above may be implemented in digital electronic circuitry, integrated circuitry, Field Programmable Gate Arrays (FPGAs), Application Specific Integrated Circuits (ASICs), Application Specific Standard Products (ASSPs), system on a chip (SOCs), Complex Programmable Logic Devices (CPLDs), computer hardware, firmware, software, and/or combinations thereof. These various embodiments may include: implemented in one or more computer programs that are executable and/or interpretable on a programmable system including at least one programmable processor, which may be special or general purpose, receiving data and instructions from, and transmitting data and instructions to, a storage system, at least one input device, and at least one output device.
Program code for implementing the methods of the present disclosure may be written in any combination of one or more programming languages. These program codes may be provided to a processor or controller of a general purpose computer, special purpose computer, or other programmable data processing apparatus, such that the program codes, when executed by the processor or controller, cause the functions/operations specified in the flowchart and/or block diagram to be performed. The program code may execute entirely on the machine, partly on the machine, as a stand-alone software package partly on the machine and partly on a remote machine or entirely on the remote machine or server.
In the context of this disclosure, a machine-readable medium may be a tangible medium that can contain, or store a program for use by or in connection with an instruction execution system, apparatus, or device. The machine-readable medium may be a machine-readable signal medium or a machine-readable storage medium. A machine-readable medium may include, but is not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any suitable combination of the foregoing. More specific examples of a machine-readable storage medium would include an electrical connection based on one or more wires, a portable computer diskette, a hard disk, a Random Access Memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.
To provide for interaction with a user, the systems and techniques described here can be implemented on a computer having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to a user; and a keyboard and a pointing device (e.g., a mouse or a trackball) by which a user can provide input to the computer. Other kinds of devices may also be used to provide for interaction with a user; for example, feedback provided to the user can be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user may be received in any form, including acoustic, speech, or tactile input.
The systems and techniques described here can be implemented in a computing system that includes a back-end component (e.g., as a data server), or that includes a middleware component (e.g., an application server), or that includes a front-end component (e.g., a user computer having a graphical user interface or a web browser through which a user can interact with an implementation of the systems and techniques described here), or any combination of such back-end, middleware, or front-end components. The components of the system can be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: local Area Networks (LANs), Wide Area Networks (WANs), and the Internet.
The computer system may include clients and servers. A client and server are generally remote from each other and typically interact through a communication network. The relationship of client and server arises by virtue of computer programs running on the respective computers and having a client-server relationship to each other. The server may be a cloud server, a server of a distributed system, or a server with a combined blockchain.
It should be understood that various forms of the flows shown above may be used, with steps reordered, added, or deleted. For example, the steps described in the present disclosure may be executed in parallel, sequentially, or in different orders, as long as the desired results of the technical solutions disclosed in the present disclosure can be achieved, and the present disclosure is not limited herein.
The above detailed description should not be construed as limiting the scope of the disclosure. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions may be made in accordance with design requirements and other factors. Any modification, equivalent replacement, and improvement made within the spirit and principle of the present disclosure should be included in the scope of protection of the present disclosure.
Claims (19)
1. An operational event processing method, comprising:
in response to the detection that the object aims at least one object operation event of the target application program, intercepting the at least one object operation event to obtain object operation event information; and
and obtaining an object operation behavior record according to the object operation event information.
2. The method of claim 1, wherein intercepting at least one object operation event of the target application in response to detecting the at least one object operation event by the object, and obtaining object operation event information comprises:
intercepting the at least one object operation event while the at least one object operation event is sent to a target view, and obtaining the object operation event information, wherein the object operation event is an operation event of the object for the target application program, and the target view is a view for responding to the object operation event.
3. The method of claim 2, wherein intercepting the at least one object operation event, and obtaining the object operation event information while the at least one object operation event is sent to the target view comprises:
and intercepting the at least one object operation event to obtain the object operation event information in response to detecting that the object operation event issuing program is executed.
4. The method of claim 3, wherein intercepting the at least one object operation event in response to detecting that the object operation event issuing procedure is executed, resulting in the object operation event information, comprises:
and the monitoring program responds to the detection that the object operation event issuing program is executed, intercepts the at least one object operation event and obtains the object operation event information, wherein the monitoring program is realized based on a hook strategy.
5. The method of claim 4, further comprising:
determining an object operation event issuing program related to the object operation event from event issuing programs; and
and injecting target codes into the object operation event issuing program to obtain the monitoring program, wherein the target codes comprise codes relevant to intercepting the at least one object operation event.
6. The method of claim 4 or 5, further comprising:
the monitoring program sends the object operation event information to a recording program;
wherein, the obtaining an object operation behavior record according to the object operation event information in response to detecting the operation behavior record event for the object includes:
and responding to the detected operation behavior recording event aiming at the object by the recording program, and obtaining the object operation behavior record according to the object operation event information.
7. The method according to any one of claims 1-6, wherein the object operational event information comprises an operational time and an event parameter of at least one object operational event;
obtaining an object operation behavior record according to the object operation event information, wherein the obtaining of the object operation behavior record comprises:
determining an operation interval between two adjacent object operation events according to the operation time of the at least one object operation event; and
and obtaining the object operation behavior record according to the operation interval between two adjacent object operation events and the event parameter of the at least one object operation event.
8. The method of any of claims 1-7, further comprising:
in response to detecting an operational behavior playback event for the object, playing back the at least one object operational event in accordance with the object operational behavior record.
9. An operational event processing apparatus comprising:
the system comprises a first obtaining module, a second obtaining module and a third obtaining module, wherein the first obtaining module is used for responding to at least one object operation event of an object aiming at a target application program, intercepting the at least one object operation event and obtaining object operation event information; and
and the second obtaining module is used for obtaining an object operation behavior record according to the object operation event information.
10. The apparatus of claim 9, wherein the first obtaining means comprises:
the first obtaining sub-module is configured to intercept the at least one object operation event while the at least one object operation event is sent to a target view, so as to obtain the object operation event information, where the object operation event is an operation event of the object for the target application, and the target view is a view for responding to the object operation event.
11. The apparatus of claim 10, wherein the first obtaining submodule comprises:
and the obtaining unit is used for intercepting the at least one object operation event to obtain the object operation event information in response to the fact that the object operation event issuing program is detected to be executed.
12. The apparatus of claim 11, wherein the obtaining unit comprises:
and the obtaining subunit is used for intercepting the at least one object operation event by a monitoring program in response to the detection that the object operation event issuing program is executed, so as to obtain the object operation event information, wherein the monitoring program is implemented based on a hook policy.
13. The apparatus of claim 12, further comprising:
the determining module is used for determining an object operation event issuing program related to the object operation event from event issuing programs; and
a third obtaining module, configured to inject a target code into the object operation event issuing program to obtain the monitor, where the target code includes a code related to intercepting the at least one object operation event.
14. The apparatus of claim 12 or 13, further comprising:
a sending module, configured to send the object operation event information to a recording program by the monitoring program;
wherein the second obtaining module includes:
and the second obtaining submodule is used for responding to the operation behavior recording event aiming at the object detected by the recording program and obtaining the object operation behavior record according to the object operation event information.
15. The device according to any one of claims 9-14, wherein the object operation event information comprises an operation time and an event parameter of at least one object operation event;
obtaining an object operation behavior record according to the object operation event information, wherein the obtaining of the object operation behavior record comprises:
determining an operation interval between two adjacent object operation events according to the operation time of the at least one object operation event; and
and obtaining the object operation behavior record according to the operation interval between two adjacent object operation events and the event parameter of the at least one object operation event.
16. The apparatus of any of claims 9-15, further comprising:
and the playback module is used for responding to the detection of the operation behavior playback event aiming at the object and playing back the at least one object operation event according to the object operation behavior record.
17. An electronic device, comprising:
at least one processor; and
a memory communicatively coupled to the at least one processor; wherein,
the memory stores instructions executable by the at least one processor to enable the at least one processor to perform the method of any one of claims 1-8.
18. A non-transitory computer readable storage medium having stored thereon computer instructions for causing the computer to perform the method of any of claims 1-8.
19. A computer program product comprising a computer program which, when executed by a processor, implements a method according to any one of claims 1 to 8.
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN202210308723.2A CN114721787A (en) | 2022-03-25 | 2022-03-25 | Operation event processing method and device, electronic equipment and storage medium |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN202210308723.2A CN114721787A (en) | 2022-03-25 | 2022-03-25 | Operation event processing method and device, electronic equipment and storage medium |
Publications (1)
Publication Number | Publication Date |
---|---|
CN114721787A true CN114721787A (en) | 2022-07-08 |
Family
ID=82239574
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN202210308723.2A Pending CN114721787A (en) | 2022-03-25 | 2022-03-25 | Operation event processing method and device, electronic equipment and storage medium |
Country Status (1)
Country | Link |
---|---|
CN (1) | CN114721787A (en) |
-
2022
- 2022-03-25 CN CN202210308723.2A patent/CN114721787A/en active Pending
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US9355002B2 (en) | Capturing trace information using annotated trace output | |
US10084637B2 (en) | Automatic task tracking | |
CN113127050B (en) | Application resource packaging process monitoring method, device, equipment and medium | |
US10705858B2 (en) | Automatic import of third party analytics | |
CN113568626B (en) | Dynamic packaging and application package opening method and device and electronic equipment | |
CN107250979B (en) | Application event tracking | |
CN112835639A (en) | Hook implementation method, device, equipment, medium and product | |
CN111078418A (en) | Operation synchronization method and device, electronic equipment and computer readable storage medium | |
CN115310096A (en) | Security vulnerability processing method, device, equipment and medium | |
CN113839944B (en) | Method, device, electronic equipment and medium for coping with network attack | |
CN114721787A (en) | Operation event processing method and device, electronic equipment and storage medium | |
CN113392002B (en) | Test system construction method, device, equipment and storage medium | |
CN110262856B (en) | Application program data acquisition method, device, terminal and storage medium | |
CN114462030A (en) | Privacy policy processing and evidence obtaining method, device, equipment and storage medium | |
CN115062304A (en) | Risk identification method and device, electronic equipment and readable storage medium | |
CN111741046B (en) | Data reporting method, data acquisition method, device, equipment and medium | |
CN114205156A (en) | Message detection method and device for tangent plane technology, electronic equipment and medium | |
CN114329149A (en) | Detection method and device for automatically capturing page information, electronic equipment and readable storage medium | |
CN112003833A (en) | Abnormal behavior detection method and device | |
US20180007152A1 (en) | Asynchronous custom exit points | |
US9838488B2 (en) | Agent asynchronous transaction monitor | |
CN113127051B (en) | Application resource packaging process monitoring method, device, equipment and medium | |
CN116302086A (en) | Application processing method and device, electronic equipment and readable storage medium | |
CN116055202A (en) | Identification method, device and equipment of risk equipment and storage medium | |
CN114090073A (en) | Interface information extraction method and device, electronic equipment and storage medium |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PB01 | Publication | ||
PB01 | Publication | ||
SE01 | Entry into force of request for substantive examination | ||
SE01 | Entry into force of request for substantive examination |