Malware-Resistant Application Control in Virtualized Environments
US-2017286673-A1 · Oct 5, 2017 · US
US10956176B2 · US · B2
| Field | Value |
|---|---|
| Publication number | US-10956176-B2 |
| Application number | US-201816107612-A |
| Country | US |
| Kind code | B2 |
| Filing date | Aug 21, 2018 |
| Priority date | Nov 21, 2017 |
| Publication date | Mar 23, 2021 |
| Grant date | Mar 23, 2021 |
A practical reading order for non-experts. Skip the full description unless you need deep technical detail.
What the patent document calls the invention.
A short plain-language summary of the technical disclosure.
Who owns or filed the patent and who is credited as inventor.
Filing, priority, publication, and grant dates set the timeline.
The legal scope of protection — read this for what is actually claimed.
Technology tags used to group this patent with similar filings.
Prior art links and similar publications in this corpus.
Official abstract text for this publication.
Embodiments of the present application disclose a processing method, a device, a storage medium, and a mobile terminal for implementing automatic startup. The method includes: acquiring, by a processing device for implementing automatic startup, at least one of program startup information and startup call information of an application when it is detected that a startup event for the application occurs; sending, by the processing device for implementing automatic startup, the at least one of the program startup information and the startup call information to a server for acquiring a determination strategy for the application serving as a startup control strategy for the application, wherein the determination strategy is obtained by the server through analyzing the at least one of the program startup information and the startup call information; controlling, by the processing device for implementing automatic startup, startup of the application according to the startup control strategy for the application.
Opening claim text (preview).
What is claimed is: 1. A processing method for implementing automatic startup, comprising: acquiring, by a processing device for implementing automatic startup, program startup information and startup call information of an application when it is detected that a startup event for the application occurs, wherein the program startup information comprises a package name and package information of the application, and the startup call information comprises a startup caller, a startup call component and a startup call path; sending, by the processing device for implementing automatic startup, the program startup information and the startup call information to a server for acquiring a determination strategy for the application serving as a startup control strategy for the application, wherein the determination strategy is obtained by the server through analyzing the at least one of the program startup information and the startup call information; controlling, by the processing device for implementing automatic startup, startup of the application according to the startup control strategy for the application; and wherein the sending, by the processing device for implementing automatic startup, the program startup information and the startup call information to a server for acquiring a determination strategy for the application serving as a startup control strategy for the application, wherein the determination strategy is obtained by the server through analyzing the at least one of the program startup information and the startup call information, comprises: sending, by the processing device for implementing automatic startup, the program startup information and the startup call information to a server for determining a statistical result for a startup caller of the application, wherein the determination strategy for the application is determined according to the statistical result for the startup caller of the application, and the application is determined to be a malicious startup application when the statistical result for the startup caller of the application exceeds a predetermined threshold; and acquiring, by the processing device for implementing automatic startup, the determination strategy, and using the determination strategy as a startup control strategy for the application. 2. The processing method for implementing automatic startup according to claim 1 , wherein the acquiring, by a processing device for implementing automatic startup, program startup information of an application, comprises: acquiring, by the processing device for implementing automatic startup, the program startup information of the application through a process management service. 3. The processing method for implementing automatic startup according to claim 1 , wherein the acquiring, by a processing device for implementing automatic startup, startup call information of the application, comprises: determining, by a processing device for implementing automatic startup, the startup call information of the application by accessing a call stack. 4. The processing method for implementing automatic startup according to claim 1 , wherein the sending, by the processing device for implementing automatic startup, the startup call information to a server, comprises: determining, by the processing device for implementing automatic startup, a startup manner of the application according to the startup call information; in response to determining that the startup manner of the application is unknown, sending, by the processing device for implementing automatic startup, the at least one of the program startup information and the startup call information to the server; in response to determining that the startup manner of the application is known, setting, by the processing device for implementing automatic startup, a local startup control strategy as the startup control strategy for the application. 5. The processing method for implementing automatic startup according to claim 1 , wherein the determining, by the processing device for implementing automatic startup, a startup manner of the application, comprises: when at least one of the startup caller, the startup call component and the startup call path is unknown, determining, by the processing device for implementing automatic startup, that the startup manner of the application is unknown; when the startup caller, the startup call component and the startup call path are all known, determining, by the processing device for implementing automatic startup, that the startup manner of the application is known. 6. The processing method for implementing automatic startup according to claim 1 , wherein the controlling, by the processing device for implementing automatic startup, startup of the application according to the startup control strategy for the application, comprises: if it is determined, according to the startup control strategy for the application, not to start the application, closing, by the processing device for implementing automatic startup, the application after the application is started; or, terminating, by the processing device for implementing automatic startup, the application during the startup of the application. 7. The processing method for implementing automatic startup according to claim 6 , wherein the terminating, by the processing device for implementing automatic startup, the application during the startup of the application, comprises: recycling, by the processing device for implementing automatic startup, a first process started by the application. 8. The processing method for implementing automatic startup according to claim 1 , further comprising: acquiring, by the processing device for implementing automatic startup, startup scene information when it is detected that a startup event for the application occurs, wherein the startup scene information comprises: one or more of screen status, a system interface, battery information and memory utilization when the startup event for the application occurs; correspondingly, wherein the sending, by the processing device for implementing automatic startup, the program startup information and the startup call information to a server for acquiring a determination strategy for the application serving as a startup control strategy for the application, comprises: sending, by the processing device for implementing automatic startup, the startup scene information and the program startup information and the startup call information, to the server for acquiring the determination strategy for the application serving as the startup control strategy for the application, wherein the determination strategy is obtained by the server through analyzing the startup scene information and the at least one of the program startup information and the startup call information. 9. The processing method for implementing automatic startup according to claim 1 , wherein the startup event for the application comprises: a first process is created during the startup of the application or a predefined broadcast message is sent by the application. 10. A processing device for implementing automatic startup, comprising: a processor, configured to acquire program startup information and startup call information of an application when it is detected that a startup event for the application occurs, wherein the program startup information comprises a package name and package information of the application, and the startup call information comprises a startup caller, a startup call component and a startup call path; a transmitter, configured to send the program startup information and the startup call information to a server for acquiring a determination strateg
at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability · CPC title
Network booting; Remote initial program loading [RIPL] · CPC title
Configuring for program initiating, e.g. using registry, configuration files · CPC title
Related publications grouped by family.
Answers are generated from the same data shown on this page.