System and method for intercepting data flow between a computer process and a file

摘要

A system and method is provided for intercepting and processing input/output of computer processes without requiring the restarting and/or recompiling of the connected processes. An exemplary method includes interrupting an execution of a first process by a CPU of a computing device having an operating system with a first file descriptor table that references the first process to a system resource and loading parasite code into an address space of the first process. The method further includes creating a communication channel between the first and second processes, updating a second file descriptor table for the second process so that the second file descriptor table includes an index references to the system resource and the communication channel, and updating the index reference in the first file descriptor table to reference the communication channel. Once the file descriptor tables have been updated the execution of the first process is restored.