Script security detection method and device

The embodiment of the invention provides a script security detection method and device, and relates to the technical field of security detection.The method comprises the steps that a target program set is injected into a current application program domain of a PowerShell process; determining whether...

Ausführliche Beschreibung

Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: ZHONG DEJI, ZHANG SUXUN, QIN ZIXING, LIU KAIWEN
Format: Patent
Sprache:chi ; eng
Schlagworte:
Online-Zugang:Volltext bestellen
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
Beschreibung
Zusammenfassung:The embodiment of the invention provides a script security detection method and device, and relates to the technical field of security detection.The method comprises the steps that a target program set is injected into a current application program domain of a PowerShell process; determining whether a currently loaded current application program domain contains a subprogram set related to script execution or not through the target program set; when it is determined that the subprogram set is included, performing hooking operation on related methods executed by scripts in the subprogram set through the target program set to obtain target script content; and performing security detection on the target script content through the target program set. According to the method, the hooking operation is carried out on the related method executed by the script of the PowerShell process through the target program set, and the security detection is carried out on the target script content obtained by the hooking operatio