Abstract: Based of computer cheating methods and aiming to the acquirement of the information by illegal program, the lawfulless program can be captured and closed forcibly when it is created and activated with the surveillance of system and process by hook functio

Key words: CAT（Computer-Assisted Testing）, Surveillance, Hook {unction, Package {iltration