公开(公告)号：US20140150103A1

公开(公告)日：2014-05-29

申请号：US13823642

申请日：2010-12-08

申请人： Jong-Young Kim ,  Jong-II Lee

发明人： Jong-Young Kim ,  Jong-II Lee

IPC分类号： G06F21/56

CPC分类号： G06F21/56 ,  G06F9/445 ,  G06F9/4484

摘要： Provided are an application module injection device, a computing device including an application module injection function, and a recording medium that records a program for executing an application module injection method. The application module injection device includes a function registration unit configured to register, in an operating system (OS), a first callback function for receiving a notice about whether a process corresponding to a program whose execution is instructed by a user is created from the OS and a second callback function for receiving a notice about whether an image corresponding to the program whose execution is instructed by the user is driven, a process information acquisition unit configured to receive the notice about whether the process corresponding to the program whose execution is instructed by the user is created from the OS through the first callback function, a process determination unit configured to select a process generated so as to correspond to the program whose execution is instructed by the user as an application module injection target process when the program whose execution is instructed by the user, which is determined through the second callback function, corresponds to a predetermined type of program, a context change unit configured to change a first entry point included in a context of a thread corresponding to the application module injection target process into a second entry point of an injected application module, and an application module injection unit configured to inject the application module into the application module injection target process.

摘要翻译： 提供了应用模块注入装置，包括应用模块注入功能的计算装置和记录用于执行应用模块注入方法的程序的记录介质。 应用模块注入装置包括功能注册单元，被配置为在操作系统（OS）中注册第一回调函数，用于接收关于是否从OS创建与用户的指令执行相关的程序的处理的通知 以及第二回调功能，用于接收关于与执行由用户指示的程序相对应的图像是否被驱动的通知;处理信息获取单元，被配置为接收关于是否执行指令的程序与 所述用户是通过所述第一回调函数从所述OS创建的，所述处理确定单元被配置为当执行为所述执行的程序为所述程序时，选择所生成的处理，以便对应于由用户指示的程序作为应用模块注入目标进程 由用户指示，其通过第二回调函数确定 响应于预定类型的程序，上下文改变单元，被配置为将包括在与应用模块注入目标进程相对应的线程的上下文中包括的第一入口点改变为注入的应用模块的第二入口点，以及应用模块注入 单元被配置为将应用模块注入到应用模块注入目标进程中。

公开(公告)号：US09098701B2

公开(公告)日：2015-08-04

申请号：US13823642

申请日：2010-12-08

申请人： Jong-Young Kim ,  Jong-II Lee

发明人： Jong-Young Kim ,  Jong-II Lee

IPC分类号： G06F11/00 ,  G06F12/14 ,  G06F12/16 ,  G08B23/00 ,  G06F21/56 ,  G06F9/445 ,  G06F9/44

CPC分类号： G06F21/56 ,  G06F9/445 ,  G06F9/4484

摘要： Provided are an application module injection device, a computing device including an application module injection function, and a recording medium that records a program for executing an application module injection method. The application module injection device includes a function registration unit configured to register, in an operating system (OS), a first callback function for receiving a notice about whether a process corresponding to a program whose execution is instructed by a user is created from the OS and a second callback function for receiving a notice about whether an image corresponding to the program whose execution is instructed by the user is driven, a process information acquisition unit configured to receive the notice about whether the process corresponding to the program whose execution is instructed by the user is created from the OS through the first callback function, a process determination unit configured to select a process generated so as to correspond to the program whose execution is instructed by the user as an application module injection target process when the program whose execution is instructed by the user, which is determined through the second callback function, corresponds to a predetermined type of program, a context change unit configured to change a first entry point included in a context of a thread corresponding to the application module injection target process into a second entry point of an injected application module, and an application module injection unit configured to inject the application module into the application module injection target process.

摘要翻译： 提供了应用模块注入装置，包括应用模块注入功能的计算装置和记录用于执行应用模块注入方法的程序的记录介质。 应用模块注入装置包括功能注册单元，被配置为在操作系统（OS）中注册第一回调函数，用于接收关于是否从OS创建与用户的指令执行相关的程序的处理的通知 以及第二回调函数，用于接收关于与执行由用户指示的程序相对应的图像是否被驱动的通知的处理信息获取单元，被配置为接收关于执行指令的程序是否对应​​于 所述用户是通过所述第一回调函数从所述OS创建的，所述处理确定单元被配置为当执行为所述执行的程序为所述程序时，选择所生成的处理，以便对应于由用户指示的程序作为应用模块注入目标进程 由用户指示，其通过第二回调函数确定 响应于预定类型的程序，上下文改变单元，被配置为将包括在与应用模块注入目标进程相对应的线程的上下文中包括的第一入口点改变为注入的应用模块的第二入口点，以及应用模块注入 单元被配置为将应用模块注入到应用模块注入目标进程中。