Terminal attack defense method and device, terminal and cloud server

Abstract

The invention discloses a terminal attack defense method and device, a terminal and a cloud server. Before CA and TA communicate, scene feature information, such as screen click information, corresponding to a current CA operation is verified by a safety execution environment, such as TEE, so that whether the current CA operation is a real operation of a user or an attack behavior of a hacker is determined, and if the current CA operation is the attack behavior of the hacker, the screen click information does not exist. If the risk of hacker attack exists, communication between the CA and theTA is not established, so that the CA cannot run normally, and heuristics initiated by the hacker for discovering system vulnerabilities are blocked.

Description

technical field [0001] The present application relates to computer technology, and in particular to an attack defense technology and various computer devices applying the attack defense technology. Background technique [0002] Hacking, to put it simply, is a technique in which hackers discover flaws in terminal systems or networks, and attack these flaws. The defects mentioned here include software defects, hardware defects, network protocol defects and management defects. [0003] In order to defend against hacker attacks in traditional technologies, there are generally the following defense methods: address space layout randomization (address apace layout randomization, ASLR) defense methods, such as figure 1 As shown, the ASLR defense method uses a random address generator to change the original memory address on the stack into a randomized address. When a hacker finds a stack overflow vulnerability, he searches for the address of the corresponding stack and implants th...

AI Technical Summary

Problems solved by technology

[0005] This application provides a terminal attack defense method, device, terminal and cloud server to solve the problem that

Images