Method for constructing data structures and method for describing running states of computer and state transitions thereof

1. A method for constructing a data structure for describing a current running state of a whole computer at a current time, the method comprising:

in response to a calling instruction being called, which is acquired after performing a disassembling process that translates machine codes into assembly codes, constructing, at a current time of execution of the calling instruction, the data structure for describing the current running state of the whole computer at the current time at least by:

using a code segment in which the calling instruction is located as a node;

using a calling relationship which is built by the calling instruction between a code segment initiating the calling instruction and a called code segment as a calling path when the computer is running; and

using one or more nodes and calling paths prior to the calling instruction as part of the data structure, wherein:

the code segment comprises a segment of codes executed sequentially by the computer, which jumps to the called code segment according to the calling instruction,

the code segment in which the calling instruction is located is referred to as a calling node,

the called code segment is referred to as a called node, and

the data structure comprises respective nodes and calling paths between respective calling nodes and respective called nodes;

each time a new calling instruction that is executed by the computer is acquired, the data structure is acquired, where the data structure comprises all nodes and corresponding calling paths prior to the new calling instruction, and dynamically update the data structure by:

acquiring an address of the new called code segment from calling parameters;

acquiring a code segment initiating the new calling instruction based on the address of the new called code segment and acquiring a called code segment called by the new calling instruction;

using the code segment initiating the new calling instruction as a new calling node;

using the called code segment called by the new calling instruction as a new called node;

establishing a new calling path between the new calling node and the new called node using a calling relationship between the code segment initiating the new calling instruction and the called code segment; and

adding the new calling node, the new called node, and the new calling path into the data structure so that the data structure is updated continuously in real time.

2. The method for constructing the data structure for describing the current running state of the whole computer at the current time according to claim 1 , wherein acquiring the calling instruction comprises:

performing binary translation on machine codes executed by the computer, so as to acquire the calling instruction.

3. A method for describing a current running state of a whole computer at a current time by using a data structure, the method comprising:

in response to a calling instruction being called, which is acquired after performing a disassembling process that translates machine codes into assembly codes, constructing, at a current time of execution of the calling instruction, the data structure for describing the current running state of the whole computer at the current time at least by:

using a code segment in which the calling instruction is located as a node;

using a calling relationship which is built by the calling instruction between a code segment initiating the calling instruction and a called code segment as a calling path when the computer is running; and

using one or more nodes and calling paths prior to the calling instruction as part of the data structure, wherein:

the code segment comprises a segment of codes executed sequentially by the computer, which jumps to the called code segment according to the calling instruction,

the code segment in which the calling instruction is located is referred to as a calling node,

the called code segment is referred to as a called node, and

the data structure comprises respective nodes and calling paths between respective calling nodes and respective called nodes;

each time a new calling instruction that is executed by the computer is acquired, the data structure is acquired, where the data structure comprises all nodes and corresponding calling paths prior to the new calling instruction, and the data structure is dynamically updated by:

acquiring an address of the new called code segment from calling parameters;

acquiring a code segment initiating the new calling instruction based on the address of the new called code segment and acquiring a called code segment called by the new calling instruction;

using the called code segment called by the new calling instruction as a new called node;

establishing a new calling path between the new calling node and the new called node is established using a calling relationship between the code segment initiating the new calling instruction and the called code segment; and

adding the new calling node, the new called node, and the new calling path into the data structure so that the data structure is updated continuously in real time.

4. The method for describing the current running state of the whole computer at the current time according to claim 3 , wherein acquiring the calling instruction comprises:

performing binary translation on machine codes executed by the computer, so as to acquire the calling instruction.

5. A method for describing a current running state transition of a whole computer at a current time by using a data structure, the method comprising:

in response to a calling instruction being called, which is acquired after performing a disassembling process that translates machine codes into assembly codes, constructing, at a current time of execution of a calling instruction, the data structure for describing the current running state of the whole computer at the current time at least by:

using a code segment in which the calling instruction is located as a node;

using a calling relationship which is built by the calling instruction between a code segment initiating the calling instruction and a called code segment as a calling path when the whole computer is running; and

using one or more nodes and calling paths prior to the calling instruction as part of the data structure, wherein:

the code segment comprises a segment of codes executed sequentially by the computer, which jumps to the called code segment according to the calling instruction,

the code segment in which the calling instruction is located is referred to as a calling node,

the called code segment is referred to as a called node, and

the data structure comprises respective nodes and calling paths between respective calling nodes and respective called nodes;

each time a new calling instruction that is executed by the computer is acquired, the data structure is acquired, where the data structure comprises all nodes and corresponding calling paths prior to the new calling instruction, and dynamically update the structure by:

acquiring an address of the new called code segment from calling parameters;

acquiring a code segment initiating the new calling instruction based on the address of the new called code segment and acquiring a called code segment called by the new calling instruction;

using the called code segment called by the new calling instruction as a new called node;

establishing a new calling path between the new calling node and the new called node using a calling relationship between the code segment initiating the new calling instruction and the called code segment; and

adding the new calling node, the new called node, and the new calling path into the data structure so that the data structure is updated continuously in real time.

6. The method for describing the current running state transition of the whole computer at the current time according to claim 5 , wherein acquiring the current calling instruction comprises:

performing binary translation on machine codes executed by the computer, so as to acquire the calling instruction.