CN103324442A - I/O request processing method and electronic equipment - Google Patents

I/O request processing method and electronic equipment Download PDF

Info

Publication number
CN103324442A
CN103324442A CN2012100806362A CN201210080636A CN103324442A CN 103324442 A CN103324442 A CN 103324442A CN 2012100806362 A CN2012100806362 A CN 2012100806362A CN 201210080636 A CN201210080636 A CN 201210080636A CN 103324442 A CN103324442 A CN 103324442A
Authority
CN
China
Prior art keywords
request
package informatin
judged result
processing
request package
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN2012100806362A
Other languages
Chinese (zh)
Other versions
CN103324442B (en
Inventor
易鸿斌
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Lenovo Beijing Ltd
Original Assignee
Lenovo Beijing Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Lenovo Beijing Ltd filed Critical Lenovo Beijing Ltd
Priority to CN201210080636.2A priority Critical patent/CN103324442B/en
Priority claimed from CN201210080636.2A external-priority patent/CN103324442B/en
Publication of CN103324442A publication Critical patent/CN103324442A/en
Application granted granted Critical
Publication of CN103324442B publication Critical patent/CN103324442B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Abstract

The invention discloses an I/O request processing method which is used for protecting a magnetic disc. The method comprises the following steps: acquiring an I/O request generated by an application program and acquiring a piece of I/O request packet information on the basis of the I/O request; when a first drive acquires the I/O request packet information, judging whether the operation corresponding to the I/O request is a first operation; if the operation corresponding to the I/O request is the first operation, conducting first processing to the I/O request packet information; when a second drive in electronic equipment acquires the I/O request packet information, judging whether the I/O request information is the I/O request information subjected to the first processing; if the information of the I/O request packet is the I/O request information subjected to the first processing, executing the operation corresponding to the I/O request. The invention further discloses the electronic equipment for implementing the method.

Description

A kind of method and electronic equipment of processing the I/O request
Technical field
The present invention relates to the communications field, particularly a kind of method and electronic equipment of processing the I/O request.
Background technology
The memory device protection software redirected based on I/O (input and output) may be penetrated; can be by directly sending SCSI (Small Computer System Interface such as application layer/driving layer; small computer system interface) memory device protection software is walked around in instruction; perhaps driving layer can also be by obtaining the driven object of DISK (disk); directly call Dispatch (scheduling) function of driven object etc., also can walk around memory device protection software.The memory device that these methods all may cause being redirected based on IO is protected software failure, may cause damage to disk.
Summary of the invention
The embodiment of the invention provides a kind of method and electronic equipment of the I/O of processing request, for the protection of disk.
A kind of method of processing input and output I/O request is applied in the electronic equipment, and described method comprises:
Obtain the I/O request that an application program generates, and obtain I/O request package informatin based on described I/O request;
In described electronic equipment first when drive obtaining described I/O request package informatin, judge whether operation corresponding to described I/O request is the first operation, obtains the first judged result;
When described the first judged result shows that described I/O asks described the first operation of being operating as of correspondence, described I/O request package informatin is carried out first process;
When the second driving in described electronic equipment obtains described I/O request package informatin, judge that described I/O request package informatin whether through the I/O request package informatin after described the first processing, obtains the second judged result;
When described the second judged result shows that it is when asking package informatin through the I/O after described the first processing that described I/O asks package informatin, drives by described second and carries out the operation that described I/O asks correspondence.
Better, described first is operating as write operation.
Better, described the first driving is filtration drive, described the second driving is that class drives or port driver.
Better, described I/O request package informatin is carried out the first step of processing comprise: described I/O request package informatin is recorded in the tabulation, or the value of the first element in the described I/O request bag is set to the first particular value.
Better, whether judge described I/O request package informatin through the I/O request package informatin after described the first processing, the step that obtains the second judged result comprises: judge that whether described I/O request package informatin is present in the described tabulation, obtains the second judged result; Or judge that described I/O asks whether the value of described the first element in the bag is described the first particular value, obtains the second judged result.
Better, when judging whether definite described I/O request package informatin is present in the described tabulation, described the second judged result shows that described I/O request package informatin is the I/O request package informatin after processing through described first; Maybe when judging that the value of determining described the first element in the described I/O request bag is described the first particular value, described the second judged result shows that described I/O request package informatin is the I/O request package informatin after processing through described first.
Better, also comprise step: when described the second judged result shows that it is not when asking package informatin through the I/O after described the first processing, abandon described I/O request package informatin, or the described I/O of refusal execution to ask corresponding operation that described I/O asks package informatin.
A kind of electronic equipment comprises:
Acquisition module is used for obtaining the I/O request that an application program generates, and obtains I/O request package informatin based on described I/O request;
First drives, and is used for when first of described electronic equipment drives the described I/O request of acquisition package informatin, judges whether operation corresponding to described I/O request is the first operation, obtains the first judged result;
Processing module is used for when described the first judged result shows that described I/O asks described the first operation of being operating as of correspondence, described I/O request package informatin is carried out first process;
Second drives, and is used for when the second driving of described electronic equipment obtains described I/O request package informatin, judges that described I/O request package informatin whether through the I/O request package informatin after described the first processing, obtains the second judged result;
Operational module, being used for when described the second judged result shows described I/O request package informatin is when asking package informatin through the I/O after described the first processing, to drive the operation of carrying out described I/O request correspondence by described second.
Better, described first is operating as write operation.
Better, described the first driving is filtration drive, described the second driving is that class drives or port driver.
Better, described processing module specifically is used for described I/O request package informatin is recorded to a tabulation, or the value of the first element in the described I/O request bag is set to the first particular value.
Better, described the second driving specifically is used for:
Judge that whether described I/O request package informatin is present in the described tabulation, obtains the second judged result;
Or judge that described I/O asks whether the value of described the first element in the bag is described the first particular value, obtains the second judged result.
Better, when described the second driving judged whether definite described I/O request package informatin is present in the described tabulation, described the second judged result showed that described I/O request package informatin is through the I/O request package informatin after described the first processing; Or when the described second value that drives described the first element in the definite described I/O request bag of judgement was described the first particular value, described the second judged result showed that described I/O request package informatin is to ask package informatin through the I/O after described the first processing.
Better, it is not when asking package informatin through the I/O after described the first processing that described operational module also is used for when described the second judged result shows described I/O request package informatin, abandon described I/O request package informatin, or the described I/O of refusal execution asks corresponding operation.
The method of processing the I/O request in the embodiment of the invention is to obtain the I/O request that an application program generates, and based on described I/O request acquisition one I/O request bag (IRP) information; When the first driving in described electronic equipment obtains described I/O request package informatin, judge whether operation corresponding to described I/O request is write operation, obtains the first judged result; When described the first judged result show described I/O request corresponding be operating as write operation the time, described I/O request package informatin is carried out first processes; When the second driving in described electronic equipment obtains described I/O request package informatin, judge that described I/O request package informatin whether through the I/O request package informatin after described the first processing, obtains the second judged result; When described the second judged result shows that it is when asking package informatin through the I/O after described the first processing that described I/O asks package informatin, drives by described second and carries out the operation that described I/O asks correspondence.By judging that in the second driving place whether described I/O request package informatin is through the I/O request package informatin after described the first processing; carry out corresponding operating according to judged result again; if described I/O request package informatin is not the I/O request package informatin after processing through described first; can determine that then described I/O request package informatin is not through memory device protection software; then can abandon this I/O and ask package informatin or this I/O of refusal execution to ask corresponding operation, thereby effectively protect disk.
Description of drawings
Fig. 1 is the main method process flow diagram of processing the I/O request in the embodiment of the invention;
Fig. 2 is the primary structure figure of electronic equipment in the embodiment of the invention.
Embodiment
The method of processing the I/O request in the embodiment of the invention is to obtain the I/O request that an application program generates, and based on described I/O request acquisition one I/O request bag (IRP) information; When the first driving in described electronic equipment obtains described I/O request package informatin, judge whether operation corresponding to described I/O request is write operation, obtains the first judged result; When described the first judged result show described I/O request corresponding be operating as write operation the time, described I/O request package informatin is carried out first processes; When the second driving in described electronic equipment obtains described I/O request package informatin, judge that described I/O request package informatin whether through the I/O request package informatin after described the first processing, obtains the second judged result; When described the second judged result shows that it is when asking package informatin through the I/O after described the first processing that described I/O asks package informatin, drives by described second and carries out the operation that described I/O asks correspondence.By judging that in the second driving place whether described I/O request package informatin is through the I/O request package informatin after described the first processing; carry out corresponding operating according to judged result again; if described I/O request package informatin is not the I/O request package informatin after processing through described first; can determine that then described I/O request package informatin is not through memory device protection software; then can abandon this I/O and ask package informatin or this I/O of refusal execution to ask corresponding operation, thereby effectively protect disk.
Referring to Fig. 1, the main method flow process of processing the I/O request in the embodiment of the invention is as follows, and described method can be applied in the electronic equipment:
Step 101: obtain the I/O request that an application program generates, and obtain I/O request package informatin based on described I/O request.
When upper level applications is communicated by letter with bsp driver, application program can be sent the I/O request, convert corresponding I/O request to corresponding IRP (I/O Request Packet, the input output request bag) request bag, different IRP request bags can be dispatched to different sending in the routine according to type and process.
The request of I/O described in embodiment of the invention bag can be IRP request bag.When described electronic equipment obtains I/O request that an application program sends, this I/O request is converted to corresponding IRP request bag, namely obtain I/O request package informatin based on described I/O request.
Step 102: in described electronic equipment first when drive obtaining described I/O request package informatin, judge whether operation corresponding to described I/O request is the first operation, obtains the first judged result.
In the embodiment of the invention; described the first operation can be write operation; because read operation is reading out data from disk; no matter whether protect software through memory device; its threat to disk is not very large, and write operation is will be to data writing in the disk, if protect the filtration of software without memory device; may in disk, write invalid data, larger to disk harm.
The first driving can be filtration drive described in the embodiment of the invention, and memory device protection software comes information is filtered by filtration drive just, can effectively stop harmful information to pass through.Described first drives when obtaining described I/O request package informatin, can judge whether operation corresponding to described I/O request is the first operation, whether be write operation namely, obtain the first judged result, this first judged result is used for representing that operation corresponding to described I/O request is described the first operation or is not described the first operation.
Step 103: when described the first judged result shows that described I/O asks described the first operation of being operating as of correspondence, described I/O request package informatin is carried out first process.
When described the first judged result shows that described I/O asks described the first operation of being operating as of correspondence; can carry out first to described I/O request package informatin processes; for example; the first mode of processing described in the embodiment of the invention can be that described I/O request package informatin is recorded in the tabulation; maybe can ask the value of the first element in the bag to be set to the first particular value by described I/O; perhaps also can be other processing modes; described first processes just for described I/O request package informatin is made a sign; in described the second driving place the I/O information that receives is detected; therefore, if the processing mode that meets inventive concept all within protection scope of the present invention.
Step 104: when the second driving in described electronic equipment obtains described I/O request package informatin, judge that described I/O request package informatin whether through the I/O request package informatin after described the first processing, obtains the second judged result.
The second driving described in the embodiment of the invention can be that class drives or port driver, no matter whether described I/O request package informatin drives through described first, it all can drive through described second, therefore can check point be set in described the second driving place, described second drives when receiving described I/O request package informatin, can judge that whether described I/O request package informatin is through the I/O request package informatin after described the first processing, in the embodiment of the invention, if the described first mode of processing is for being recorded to described I/O request package informatin in one tabulation, then described second drive to need to judge whether the described I/O request package informatin that receives is arranged in described tabulation, described the second judged result is for showing described I/O request packet bit in described tabulation or not being arranged in described tabulation; If the described first mode of processing is set to the first particular value for the value of the first element in the described I/O request bag, then described second drive whether the value that need to judge described the first element in the described I/O request bag that receives is described the first particular value, described the second judged result is used for showing that described I/O asks the value of described first element of bag to be described the first particular value or not to be described the first particular value.Wherein, can comprise a plurality of elements in the described I/O request bag, the first mode of processing described in the embodiment of the invention can be that the value of wherein certain element is set to described the first particular value, described certain element can be called described the first element.
Step 105: when described the second judged result shows that it is when asking package informatin through the I/O after described the first processing that described I/O asks package informatin, drives by described second and carries out the operation that described I/O asks correspondence.
When described the second judged result shows that it is when asking package informatin through the I/O after described the first processing that described I/O asks package informatin, namely, if the described first mode of processing is for being recorded to described I/O request package informatin in one tabulation, described the second judged result shows that described I/O request packet bit is in described tabulation; If the described first mode of processing is set to the first particular value for the value of the first element in the described I/O request bag, described the second judged result shows that the value of described the first element in the described I/O request bag is described the first particular value, then can drive the corresponding I/O of continuation execution described I/O request bag by described second and ask corresponding operation, for example data to be written can be write disk, etc.
When described the second judged result shows that it is not when asking package informatin through the I/O after described the first processing that described I/O asks package informatin, namely, if the described first mode of processing is for being recorded to described I/O request package informatin in one tabulation, described the second judged result shows that described I/O request package informatin is not arranged in described tabulation; If the described first mode of processing is set to the first particular value for the value of the first element in the described I/O request bag; described the second judged result shows that the value of described the first element in the described I/O request bag is not described the first particular value; then described the second driving can abandon described I/O request bag; perhaps can refuse to carry out the corresponding I/O of described I/O request bag and ask corresponding operation, not be subjected to possible injury in order to protect disk.
Below introduce among the present invention the method for processing the I/O request by several specific embodiments.
Embodiment one:
At first obtain the I/O request that an application program generates, described I/O request is converted to I/O request bag, obtain this I/O request package informatin.
In the electronic equipment described first drives and receives this I/O request bag, obtain this I/O request package informatin, judge that this I/O asks whether corresponding operation is write operation, obtain described the first judged result, the first judged result described in the embodiment of the invention shows that it is write operation that this I/O asks corresponding operation.
Described I/O request bag is carried out described first process, the first mode of processing described in the embodiment of the invention is for being recorded to described I/O request package informatin in one tabulation.
After record, described I/O request bag continues to transmit.In the described electronic equipment described second drives and receives I/O request bag, judge that whether this I/O request bag is through the I/O request bag after described the first processing, be in the embodiment of the invention and judge whether described I/O request package informatin is present in the described tabulation, the second judged result described in the embodiment of the invention shows that described I/O request bag is present in the described tabulation.
Determining that according to described the second judged result described I/O request bag has passed through memory device protection software, is safe, and described the second driving can continue to carry out described I/O asks corresponding operation.
Embodiment two:
At first obtain the I/O request that an application program generates, described I/O request is converted to I/O request bag, obtain this I/O request package informatin.
In the electronic equipment described first drives and receives this I/O request bag, obtain this I/O request package informatin, judge that this I/O asks whether corresponding operation is write operation, obtain described the first judged result, the first judged result described in the embodiment of the invention shows that it is write operation that this I/O asks corresponding operation.
Described I/O request bag is carried out described first process, the first mode of processing described in the embodiment of the invention is set to the first particular value for the value of the first element in the described I/O request bag.
After record, described I/O request bag continues to transmit.In the described electronic equipment described second drives and receives I/O request bag, judge that whether this I/O request bag is through the I/O request bag after described the first processing, be in the embodiment of the invention whether the value of judging the first element in the described I/O request bag is described the first particular value, the second judged result described in the embodiment of the invention shows that the value of the first element described in the described I/O request bag is described the first particular value.
Determining that according to described the second judged result described I/O request bag has passed through memory device protection software, is safe, and described the second driving can continue to carry out the corresponding operation of described I/O request bag.
Embodiment three:
At first obtain the I/O request that an application program generates, described I/O request is converted to I/O request bag, obtain this I/O request package informatin.
In the electronic equipment described first drives and receives this I/O request bag, obtain this I/O request package informatin, judge that this I/O asks whether corresponding operation is write operation, obtain described the first judged result, the first judged result described in the embodiment of the invention shows that it is not write operation that this I/O asks corresponding operation.Then can not carry out subsequent processes.
Embodiment four:
At first obtain the I/O request that an application program generates, described I/O request is converted to I/O request bag, obtain this I/O request package informatin.
In the electronic equipment described first drives and receives this I/O request bag, obtain this I/O request package informatin, judge that this I/O asks whether corresponding operation is write operation, obtain described the first judged result, the first judged result described in the embodiment of the invention shows that it is write operation that this I/O asks corresponding operation.
Described I/O request bag is carried out described first process, the first mode of processing described in the embodiment of the invention is set to the first particular value for the value of the first element in the described I/O request bag.
After record, described I/O request bag continues to transmit.In the described electronic equipment described second drives and receives I/O request bag, judge that whether this I/O request bag is through the I/O request bag after described the first processing, be in the embodiment of the invention whether the value of judging the first element in the described I/O request bag is described the first particular value, the second judged result described in the embodiment of the invention shows that the value of the first element described in the described I/O request bag is not described the first particular value.
Determine that according to described the second judged result described I/O request bag has not passed through memory device protection software, may be dangerous, described the second driving can abandon described I/O request bag.
Embodiment five:
At first obtain the I/O request that an application program generates, described I/O request is converted to I/O request bag, obtain this I/O request package informatin.
In the electronic equipment described first drives and receives this I/O request bag, obtain this I/O request package informatin, judge that this I/O asks whether corresponding operation is write operation, obtain described the first judged result, the first judged result described in the embodiment of the invention shows that it is write operation that this I/O asks corresponding operation.
Described I/O request bag is carried out described first process, the first mode of processing described in the embodiment of the invention is for being recorded to described I/O request package informatin in one tabulation.
After record, described I/O request bag continues to transmit.In the described electronic equipment described second drives and receives I/O request bag, judge that whether this I/O request bag is through the I/O request bag after described the first processing, be in the embodiment of the invention and judge whether described I/O request package informatin is present in the described tabulation, the second judged result described in the embodiment of the invention shows that described I/O request bag is not present in the described tabulation.
Determine that according to described the second judged result described I/O asks to wrap through memory device protection software, may be safe, described the second driving can refuse to carry out described I/O asks corresponding operation.
Referring to Fig. 2, the embodiment of the invention also provides a kind of electronic equipment, and it can comprise acquisition module 201, the first driving 202, processing module 203, the second driving 204 and operational module 205.
Acquisition module 201 is used for obtaining the I/O request that an application program generates, and obtains I/O request package informatin based on described I/O request.
First drives 202 is used for when first of described electronic equipment drives the described I/O request of acquisition package informatin, judges whether operation corresponding to described I/O request is the first operation, obtains the first judged result.
Processing module 203 is used for when described the first judged result shows that described I/O asks described the first operation of being operating as of correspondence, described I/O request package informatin is carried out first process.
Second drives 204 is used for when the second driving of described electronic equipment obtains described I/O request package informatin, judges that described I/O request package informatin whether through the I/O request package informatin after described the first processing, obtains the second judged result.
It is when asking package informatin through the I/O after described the first processing, to drive the operation of carrying out described I/O request correspondence by described second that operational module 205 is used for when described the second judged result shows described I/O request package informatin.
The method of processing the I/O request in the embodiment of the invention is to obtain the I/O request that an application program generates, and based on described I/O request acquisition one I/O request bag (IRP) information; When the first driving in described electronic equipment obtains described I/O request package informatin, judge whether operation corresponding to described I/O request is write operation, obtains the first judged result; When described the first judged result show described I/O request corresponding be operating as write operation the time, described I/O request package informatin is carried out first processes; When the second driving in described electronic equipment obtains described I/O request package informatin, judge that described I/O request package informatin whether through the I/O request package informatin after described the first processing, obtains the second judged result; When described the second judged result shows that it is when asking package informatin through the I/O after described the first processing that described I/O asks package informatin, drives by described second and carries out the operation that described I/O asks correspondence.By judging that in the second driving place whether described I/O request package informatin is through the I/O request package informatin after described the first processing; carry out corresponding operating according to judged result again; if described I/O request package informatin is not the I/O request package informatin after processing through described first; can determine that then described I/O request package informatin is not through memory device protection software; then can abandon this I/O and ask package informatin or this I/O of refusal execution to ask corresponding operation, thereby effectively protect disk.
Described first mode of processing of carrying out can have multiple, can select as required, and is easy to operate.
Those skilled in the art should understand, embodiments of the invention can be provided as method, system or computer program.Therefore, the present invention can adopt complete hardware implementation example, complete implement software example or in conjunction with the form of the embodiment of software and hardware aspect.And the present invention can adopt the form of the computer program of implementing in one or more computer-usable storage medium (including but not limited to magnetic disk memory and optical memory etc.) that wherein include computer usable program code.
The present invention is that reference is described according to process flow diagram and/or the block scheme of method, equipment (system) and the computer program of the embodiment of the invention.Should understand can be by the flow process in each flow process in computer program instructions realization flow figure and/or the block scheme and/or square frame and process flow diagram and/or the block scheme and/or the combination of square frame.Can provide these computer program instructions to the processor of multi-purpose computer, special purpose computer, Embedded Processor or other programmable data processing device producing a machine, so that the instruction of carrying out by the processor of computing machine or other programmable data processing device produces the device that is used for realizing in the function of flow process of process flow diagram or a plurality of flow process and/or square frame of block scheme or a plurality of square frame appointments.
These computer program instructions also can be stored in energy vectoring computer or the computer-readable memory of other programmable data processing device with ad hoc fashion work, so that the instruction that is stored in this computer-readable memory produces the manufacture that comprises command device, this command device is realized the function of appointment in flow process of process flow diagram or a plurality of flow process and/or square frame of block scheme or a plurality of square frame.
These computer program instructions also can be loaded on computing machine or other programmable data processing device, so that carry out the sequence of operations step producing computer implemented processing at computing machine or other programmable devices, thereby be provided for realizing the step of the function of appointment in flow process of process flow diagram or a plurality of flow process and/or square frame of block scheme or a plurality of square frame in the instruction that computing machine or other programmable devices are carried out.
Obviously, those skilled in the art can carry out various changes and modification to the present invention and not break away from the spirit and scope of the present invention.Like this, if of the present invention these are revised and modification belongs within the scope of claim of the present invention and equivalent technologies thereof, then the present invention also is intended to comprise these changes and modification interior.

Claims (14)

1. a method of processing input and output I/O request is applied in the electronic equipment, it is characterized in that, described method comprises:
Obtain the I/O request that an application program generates, and obtain I/O request package informatin based on described I/O request;
In described electronic equipment first when drive obtaining described I/O request package informatin, judge whether operation corresponding to described I/O request is the first operation, obtains the first judged result;
When described the first judged result shows that described I/O asks described the first operation of being operating as of correspondence, described I/O request package informatin is carried out first process;
When the second driving in described electronic equipment obtains described I/O request package informatin, judge that described I/O request package informatin whether through the I/O request package informatin after described the first processing, obtains the second judged result;
When described the second judged result shows that it is when asking package informatin through the I/O after described the first processing that described I/O asks package informatin, drives by described second and carries out the operation that described I/O asks correspondence.
2. the method for claim 1 is characterized in that, described first is operating as write operation.
3. the method for claim 1 is characterized in that, described the first driving is filtration drive, and described the second driving is that class drives or port driver.
4. the method for claim 1, it is characterized in that, described I/O request package informatin is carried out the first step of processing to be comprised: described I/O request package informatin is recorded in the tabulation, or the value of the first element in the described I/O request bag is set to the first particular value.
5. method as claimed in claim 4, it is characterized in that, judge that whether described I/O request package informatin is through the I/O request package informatin after described the first processing, the step that obtains the second judged result comprises: judge that whether described I/O request package informatin is present in the described tabulation, obtains the second judged result; Or judge that described I/O asks whether the value of described the first element in the bag is described the first particular value, obtains the second judged result.
6. method as claimed in claim 5 is characterized in that, when judging whether definite described I/O request package informatin is present in the described tabulation, described the second judged result shows that described I/O request package informatin is the I/O request package informatin after processing through described first; Maybe when judging that the value of determining described the first element in the described I/O request bag is described the first particular value, described the second judged result shows that described I/O request package informatin is the I/O request package informatin after processing through described first.
7. the method for claim 1, it is characterized in that, also comprise step: when described the second judged result shows that it is not when asking package informatin through the I/O after described the first processing that described I/O asks package informatin, abandon described I/O request package informatin, or the described I/O of refusal execution asks corresponding operation.
8. an electronic equipment is characterized in that, comprising:
Acquisition module is used for obtaining the I/O request that an application program generates, and obtains I/O request package informatin based on described I/O request;
First drives, and is used for when first of described electronic equipment drives the described I/O request of acquisition package informatin, judges whether operation corresponding to described I/O request is the first operation, obtains the first judged result;
Processing module is used for when described the first judged result shows that described I/O asks described the first operation of being operating as of correspondence, described I/O request package informatin is carried out first process;
Second drives, and is used for when the second driving of described electronic equipment obtains described I/O request package informatin, judges that described I/O request package informatin whether through the I/O request package informatin after described the first processing, obtains the second judged result;
Operational module, being used for when described the second judged result shows described I/O request package informatin is when asking package informatin through the I/O after described the first processing, to drive the operation of carrying out described I/O request correspondence by described second.
9. electronic equipment as claimed in claim 8 is characterized in that, described first is operating as write operation.
10. electronic equipment as claimed in claim 8 is characterized in that, described the first driving is filtration drive, and described the second driving is that class drives or port driver.
11. electronic equipment as claimed in claim 8 is characterized in that, described processing module specifically is used for described I/O request package informatin is recorded to a tabulation, or the value of the first element in the described I/O request bag is set to the first particular value.
12. electronic equipment as claimed in claim 11 is characterized in that, described the second driving specifically is used for:
Judge that whether described I/O request package informatin is present in the described tabulation, obtains the second judged result;
Or judge that described I/O asks whether the value of described the first element in the bag is described the first particular value, obtains the second judged result.
13. electronic equipment as claimed in claim 12, it is characterized in that, when described the second driving judged whether definite described I/O request package informatin is present in the described tabulation, described the second judged result showed that described I/O request package informatin is through the I/O request package informatin after described the first processing; Or when the described second value that drives described the first element in the definite described I/O request bag of judgement was described the first particular value, described the second judged result showed that described I/O request package informatin is to ask package informatin through the I/O after described the first processing.
14. electronic equipment as claimed in claim 8, it is characterized in that, it is not when asking package informatin through the I/O after described the first processing that described operational module also is used for when described the second judged result shows described I/O request package informatin, abandon described I/O request package informatin, or the described I/O of refusal execution asks corresponding operation.
CN201210080636.2A 2012-03-23 A kind of method processing I/O request and electronic equipment Active CN103324442B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201210080636.2A CN103324442B (en) 2012-03-23 A kind of method processing I/O request and electronic equipment

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201210080636.2A CN103324442B (en) 2012-03-23 A kind of method processing I/O request and electronic equipment

Publications (2)

Publication Number Publication Date
CN103324442A true CN103324442A (en) 2013-09-25
CN103324442B CN103324442B (en) 2016-11-30

Family

ID=

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108563552A (en) * 2017-12-28 2018-09-21 北京奇虎科技有限公司 A kind of method, equipment and its storage medium of record peripheral hardware operation behavior

Citations (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1838137A (en) * 2006-04-26 2006-09-27 南京大学 Read-write access control method for plug-in memory device
CN1845071A (en) * 2006-05-17 2006-10-11 北京飞天诚信科技有限公司 Computer device driver updating method
CN1928881A (en) * 2006-09-26 2007-03-14 南京擎天科技有限公司 Computer data security protective method
CN101256528A (en) * 2008-03-20 2008-09-03 中国科学院计算技术研究所 Magnetic disk data backup system and method supporting nought backup window
CN101453327A (en) * 2007-11-29 2009-06-10 北京鼎信高科信息技术有限公司 Information leakage prevention system
CN101833557A (en) * 2009-05-25 2010-09-15 深圳市朗科科技股份有限公司 File caching method and device based on application program
CN102073813A (en) * 2010-12-27 2011-05-25 畅捷通软件有限公司 Method and device for controlling application on mobile device to run
CN102129540A (en) * 2011-05-03 2011-07-20 北京思创银联科技股份有限公司 File dynamic transparent encryption and decryption method
US8055613B1 (en) * 2008-04-29 2011-11-08 Netapp, Inc. Method and apparatus for efficiently detecting and logging file system changes

Patent Citations (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1838137A (en) * 2006-04-26 2006-09-27 南京大学 Read-write access control method for plug-in memory device
CN1845071A (en) * 2006-05-17 2006-10-11 北京飞天诚信科技有限公司 Computer device driver updating method
CN1928881A (en) * 2006-09-26 2007-03-14 南京擎天科技有限公司 Computer data security protective method
CN101453327A (en) * 2007-11-29 2009-06-10 北京鼎信高科信息技术有限公司 Information leakage prevention system
CN101256528A (en) * 2008-03-20 2008-09-03 中国科学院计算技术研究所 Magnetic disk data backup system and method supporting nought backup window
US8055613B1 (en) * 2008-04-29 2011-11-08 Netapp, Inc. Method and apparatus for efficiently detecting and logging file system changes
CN101833557A (en) * 2009-05-25 2010-09-15 深圳市朗科科技股份有限公司 File caching method and device based on application program
CN102073813A (en) * 2010-12-27 2011-05-25 畅捷通软件有限公司 Method and device for controlling application on mobile device to run
CN102129540A (en) * 2011-05-03 2011-07-20 北京思创银联科技股份有限公司 File dynamic transparent encryption and decryption method

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108563552A (en) * 2017-12-28 2018-09-21 北京奇虎科技有限公司 A kind of method, equipment and its storage medium of record peripheral hardware operation behavior
CN108563552B (en) * 2017-12-28 2021-09-28 北京奇虎科技有限公司 Method, equipment and storage medium for recording peripheral operation behaviors

Similar Documents

Publication Publication Date Title
US8978141B2 (en) System and method for detecting malicious software using malware trigger scenarios
US20150143521A1 (en) System and method for detecting malicious software using malware trigger scenarios in a modified computer environment
CN106953904A (en) Data transmission method, device, equipment and the storage medium of automatic driving vehicle
CN102422256A (en) Method for accessing a portable data storage medium with auxiliary module and portable data storage medium
CN105404794B (en) The guard method of Java application software and device
CN102087604A (en) Computer and method for acquiring hardware configuration information
CN104123495A (en) Method for neutralizing malicious software blocking computer operation
CN102722669B (en) Completeness verification method of operating system
CN102222189A (en) Method for protecting operating system
CN105229658B (en) The safety device and safety method of data handling system
KR101130088B1 (en) Malware detecting apparatus and its method, recording medium having computer program recorded
CN104424403A (en) Information processing method and electronic device
CN102938046B (en) A kind of chip-stored body and code protection method storing dynamic decipher operation based on static encryption
CN102737198B (en) Object protection method and device
CN103324442A (en) I/O request processing method and electronic equipment
CN102473100A (en) Software component wrappers for multimedia subcomponents that control the performance of the multimedia function of the subcomponents
CN202050425U (en) Illegal external connection monitoring system for internal network equipment
CN102236610A (en) Mobile storage equipment and method and intrusion prevention system
CN104615387A (en) Vehicle-mounted equipment based on XPE system and design method of vehicle-mounted equipment
CN103902478A (en) Hard disc protection method and electronic device
CN105139890A (en) Information processing method and solid-state drive
CN103856529A (en) Method, device and system for locking screen
CN103324442B (en) A kind of method processing I/O request and electronic equipment
EP2819055B1 (en) System and method for detecting malicious software using malware trigger scenarios
CN102223384A (en) Shellcode detection method based on virtual execution

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant