Method for performing dynamic safety detection on calling function

Abstract

The invention discloses a method for performing dynamic safety detection on a calling function. The method comprises the steps that in the processes of directly inputting function calling safety detection into an interface function of a function library and calling and processing an application program, the real-time operation processing process for calling information is added when the function library is realized, and an operation result is returned back outwards. The process of inputting current real-time data is added when the application program calls the function, meanwhile, the application program performs operation on the real-time information, the operation result is compared with a detection operation result returned back by the function, and if the operation results are consistent, the application program party considers that the function calling is real and effective. The method can accurately recognize whether the current function calling is safe and credible or not, and safety risks that the function library is replaced in the midway, and the function calling is intercepts illegally due to the currently-adopted one-time detection and long-term effectiveness mode are effectively avoided.

Description

technical field [0001] The invention relates to the technical field of cryptography, in particular to a method for dynamic security detection of calling functions. Background technique [0002] In the current application system development process, in order to achieve a high degree of reuse of functions, it is generally used to encapsulate functions that are relatively independent and need to be reused into a function library, and provide a calling interface for other applications to call related functions when needed. functions required by the application. Function libraries generally include system libraries provided by the operating system, development libraries provided by third parties, and interface libraries implemented internally. [0003] The function provided by the function library is relatively pure, but it is also more important. For example, the security function library generally provides functions such as identity authentication, authority judgment, data en...

AI Technical Summary

Problems solved by technology

However, this security detection method cannot cover the third-party development library and internal interface library that the application program needs to use

Malware can evade it by replacing the system library after the operating system is started, intercepting function calls to directly lead to the false function library of the malware, or directly returning false results, etc., resulting in the greatly reduced preventive effect of the above security measures Guarantee the real safety of function calls

Images