Looking for breakthrough ideas for innovation challenges? Try Patsnap Eureka!

Method for preventing bad DLL injection, storage medium, electronic equipment and system

A storage medium and poor technology, applied in the fields of electrical digital data processing, instruments, platform integrity maintenance, etc., can solve the problems of client/program/software crash, platform software leakage, hacker intrusion, etc., to improve experience, improve Security, crash prevention effect

Active Publication Date: 2020-04-07
WUHAN DOUYU NETWORK TECH CO LTD
View PDF5 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0003] However, when the DLL is called by different applications, it may be tampered with the connection by the program software, resulting in a bad link, or directly tampered with the link by a malicious program. The former may cause the client / program / software to crash, and the latter may cause hackers Intrusion, platform software is hijacked, user secrets are leaked

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Method for preventing bad DLL injection, storage medium, electronic equipment and system
  • Method for preventing bad DLL injection, storage medium, electronic equipment and system

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0056] An embodiment of the present invention provides a method for preventing bad DLL injection, which includes:

[0057] S1: Obtain a list of abnormal DLLs.

[0058] For software, it is impossible to run stably when it runs in different environments. The reason for the unstable operation of the software running in the Windows system is generally not the use of its own functions to run, but the abnormality that occurs when calling the DLL in the Windows system. For these abnormal DLLs, if it is necessary to prevent them from causing software instability, crashes, and intrusion, etc., further processing is required.

[0059] S2: traverse the DLL library in the Windows system to find the location of the abnormal DLL.

[0060] To handle the abnormal DLL, you must first find the location of the DLL. In Windows, its DLL is stored in the DLL library, so you can directly find the location of the abnormal DLL in the DLL library of the Windows system.

[0061] S3: Retrieve the abno...

Embodiment 2

[0078] An embodiment of the present invention provides a system for preventing bad DLL injection, which includes:

[0079] The interface module is used to obtain the list of abnormal DLLs;

[0080] The DLL retrieval module is used to traverse the DLL library in the Windows system to find the location of the abnormal DLL;

[0081] The function retrieval module is used to retrieve the abnormal DLL according to the location of the abnormal DLL, and obtain the position of the injected function in the abnormal DLL, and the injected function is a function of injecting the DLL to the client;

[0082] The Hook module is used to rewrite all injected functions in the abnormal DLL according to the position of the injected function in the abnormal DLL, and add a hook function in the injected function, and the hook function is used to monitor the DLL name injected by the injected function;

[0083] The monitoring module is used to compare the name of the DLL with a preset list of bad DLLs...

Embodiment 3

[0087] The third embodiment of the present invention provides a computer-readable storage medium, on which a computer program is stored. When the program is executed by a processor, the video recommendation method provided in any embodiment of the present invention is implemented. The method includes:

[0088] Obtain each watched video and each unwatched video of the target user within a preset time period, wherein the unwatched video includes a first unwatched video and a second unwatched video;

[0089] According to the collaborative filtering algorithm and each watched video, determine the candidate recommendation set from each first unwatched video;

[0090] Add the second unwatched video to the candidate recommendation set according to the preset adding rules, and determine each added recommendation set;

[0091] According to the user viewing information or video attribute information corresponding to each recommended video in each added recommendation set, and the corres...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention discloses a method for preventing bad DLL injection, a storage medium, electronic equipment and a system, and relates to the field of internet PC client application and development. Themethod comprises the steps: obtaining an abnormal DLL list; and traversing the DLL library in the Windows system, and searching the position of the abnormal DLL. And retrieving the abnormal DLL according to the position of the abnormal DLL, and obtaining the position of an injection function in the abnormal DLL, the injection function being a function of injecting the DLL into the client. According to the positions of the injection functions in the abnormal DLL, all the injection functions in the abnormal DLL are rewritten, a hook function is added into the injection functions, and the hook function is used for monitoring the name of the DLL injected by the injection functions. And comparing the DLL name with a preset bad DLL list, If the injected DLL is a bad DLL, terminating the injection of the bad DLL. According to the method, the client running in Windows can be prevented from being injected with bad DLL, so that the client is prevented from collapsing and being invaded by hackers.

Description

technical field [0001] The invention relates to the field of Internet PC client application development, in particular to a method, storage medium, electronic equipment and system for preventing bad DLL injection. Background technique [0002] The full English name of a DLL file is a Dynamic Link Library file, also known as an application extension, which is a software file. In the Windows system, for common or shared functions, if each software writes and stores them by itself, there will be a large number of duplicate functions. At the same time, it is not easy for Windows to manage these functions and even functions with the same code. In the Windows system, many applications are not a complete executable file, they have a part of the relatively independent dynamic link library, that is, the DLL file, when the program is executed, the corresponding DLL file will be called due to the dynamic link, And then assist the operation of the program. Therefore, one application m...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Applications(China)
IPC IPC(8): G06F21/56G06F21/57
CPCG06F21/562G06F21/57
Inventor 魏洪
Owner WUHAN DOUYU NETWORK TECH CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Patsnap Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Patsnap Eureka Blog
Learn More
PatSnap group products