| 摘要 |
A method for processing an operating application program and device for the same is disclosed in the embodiment of the present disclosure. The method includes following steps: a step of determining a target system call of a target application program when the target application program is initiated, a step of suspending the target system call when receiving a parameter of the target application program and a step of stopping or continuing the target system call in accordance with the parameter. The device includes a determining module, a suspending module and a processing module. The embodiment of the present disclosure can stop the action before the suspected action is executed without terminating the execution of the application program. Such a method can carry out instantaneous monitor and wide ranging applicability, that it is widely used in monitoring the suspected application program and protecting the sensitive application program. |
