Process protection method

Abstract

The invention discloses a process protection method and belongs to the computer security field. The process protection method comprises the following steps of: 1, acquiring a process list to be protected, wherein the process list comprises a service process list and a common process list; 2, injecting a remote thread into a key process of the system; and 3, starting the other three threads A, B and C, wherein when the present common process is killed, the thread A restarts the common process; when the present service process is killed; the thread B restarts the service thread; when the remote thread is terminated, the thread C re-injects a new remote thread into the key process of the system; and when one of the three threads A, B and C is killed, the current remote thread restarts the three threads A, B and C. By the process protection method, flexible protection of an appointed process is realized with fewer system resources; and the method is safe and efficient.

Description

technical field [0001] The invention relates to the field of computer security, in particular to a process protection method. Background technique [0002] Process protection is to protect the user's process from being illegally killed. If the user's process is terminated unexpectedly, it may cause the computer system to run unstable, especially when the computer is invaded by malicious programs such as viruses. Users bring very large economic losses. Important processes in the system also need to have self-protection capabilities, so that the situation that the process is killed without the user's knowledge can be avoided. [0003] One of the traditional process protection methods is to hide the process. In the Windows system, the user cannot detect the existence of the process, and the process will not be displayed in the process list of the task manager. Generally, the user cannot kill the process. However, the self-protection ability of the process protected by this me...

AI Technical Summary

Problems solved by technology

This method can effectively protect process A, but process A needs to do extra work (creating process B and protecting process B), and when the number of processes to be protected increases, the number of processes in the system will also increase linearly, which increases The consumption of system resources also increases the complexity of several processes that need to be protected. These processes have repeated additional work, that is, create their own protection process and protect this process

Images