Application attack detection method and device

Abstract

The invention discloses an application attack detection method and device, and is characterized in that the method comprises the steps: extracting a binary file from an application installation package; generating a check value according to the information corresponding to the specific position in the binary file; when the application program runs, obtaining information corresponding to a specificposition in the current application program, and comparing the information corresponding to the specific position in the current application program with the check value; and determining whether theapplication program is attacked or not according to a comparison result. According to the scheme, the information corresponding to the specific position in the binary file is used as the check value;the application program attack is monitored according to the check value, so that whether the application program is attacked or not can be quickly and accurately determined, the application program is prevented from being dynamically attacked, the reverse difficulty of the application program is greatly improved, the security of the application program is ensured, and code expansion of the application program is not easily caused; moreover, the implementation process is simple and flexible, batch maintenance is easy, and the maintenance cost is low.

Description

technical field [0001] The invention relates to the field of computer technology, in particular to an application program attack detection method and device. Background technique [0002] With the continuous development of science and technology and society, the number of various applications is also increasing rapidly. However, program reverse developers or program reverse products can easily crack and attack the application program by decompiling and debugging the application program, thereby threatening the security of the application program. [0003] At present, in order to prevent reverse cracking and attacks on application programs, there are many products and methods for strengthening application programs in the prior art. However, the inventor found in the process of implementing the present invention that the above-mentioned methods in the prior art have at least the following defects: the program reinforcement method provided in the prior art is usually a code ob...

AI Technical Summary

Problems solved by technology

However, the inventor found in the process of implementing the present invention that the above-mentioned methods in the prior art have at least the following defects: the program reinforcement method provided in the prior art is usually a code obfuscation method such as adding flowery instructions in the program, however, This kind of hardening method often causes program expansion, wastes system resources, and cannot accurately monitor the attack on the application program; moreover, the existing program hardening method is completed by the compiler installed in the developer terminal during the compilation process , so that the batch maintenance of the program hardening method cannot be realized, and the maintenance cost is high

Images