Application program attack detection method and device

Abstract

The invention discloses a method and device for detecting an application program attack, which is characterized in that it comprises: extracting a binary file from an application program installation package; generating a verification value according to information corresponding to a specific position in the binary file; when the application program is running , to obtain the information corresponding to the specific position in the current application program, and compare the information corresponding to the specific position in the current application program with the check value; according to the comparison result, determine whether the application program is under attack. This solution uses the information corresponding to a specific location in the binary file as the check value, and monitors the application program attack according to the check value, so as to quickly and accurately determine whether the application program is under attack, prevent the application program from being dynamically attacked, and significantly Improve the reverse difficulty of the application, ensure the security of the application, and not easily cause the code expansion of the application; moreover, the implementation process of this solution is simple and flexible, easy to maintain in batches, and the maintenance cost is low.

Description

technical field [0001] The invention relates to the field of computer technology, in particular to an application program attack detection method and device. Background technique [0002] With the continuous development of science and technology and society, the number of various applications is also increasing rapidly. However, program reverse developers or program reverse products can easily crack and attack the application program by decompiling and debugging the application program, thereby threatening the security of the application program. [0003] At present, in order to prevent reverse cracking and attacks on application programs, there are many products and methods for strengthening application programs in the prior art. However, the inventor found in the process of implementing the present invention that the above-mentioned methods in the prior art have at least the following defects: the program reinforcement method provided in the prior art is usually a code ob...

AI Technical Summary

Problems solved by technology

However, the inventor found in the process of implementing the present invention that the above-mentioned methods in the prior art have at least the following defects: the program reinforcement method provided in the prior art is usually a code obfuscation method such as adding flowery instructions in the program, however, This kind of hardening method often causes program expansion, wastes system resources, and cannot accurately monitor the attack on the application program; moreover, the existing program hardening method is completed by the compiler installed in the developer terminal during the compilation process , so that the batch maintenance of the program hardening method cannot be realized, and the maintenance cost is high

Images