Method and apparatus for blocking malicious access to process

摘要

An apparatus for blocking an external access to a browser includes an access monitor for monitoring whether a program is accessing the browser; and a document-object acquisition detector for detecting whether the program detected to access the browser by the access monitor acquires a document object of the browser; and an injection blocker for blocking the access of the program to the browser when the document object acquisition detector detects the document object acquisition by the corresponding program.

主权项

1. An apparatus for blocking an external access to a browser, the apparatus comprising processor programmed with instructions that, when executed, cause the processor to:
monitor whether an external program outside the browser is accessing a DOM (Document Object Model) interface of the browser through an entry point of the browser using a Remote Procedure Call (RPC) protocol; detect, upon hooking an entry point function of the RPC protocol, whether the external program being monitored has acquired a document object of the browser; and block the access of the program to the browser when a document object acquisition by the corresponding program is detected.