An embodiment of the invention provides a data processing method and device. The data processing method includes: hanging up a creating target object by monitoring a creating function in a system; intercepting application information when the target objection is called to create a preset application, wherein the application information is used for indicating creating application source architecture data; constructing application mapping architecture data of the preset application and the application source architecture data according to the application information; intercepting calling information of the preset application, and executing response according to the application mapping architecture data. Therefore, architecture of the preset application is analyzed, the calling information of the preset application is intercepted subsequently, the response is executed according to the application mapping architecture data, and convenience is brought to responding to and analyzing the preset application.