远控木马运行原理与流量特征分析

随着网络的飞速发展,人们日常生活日益离不开网络,计算机木马程序乘虚而入,严重危害了网络中的主机安全。文章主要针对远控类型木马,分析了其运行原理并总结出其流量特征,通过一系列测试对流量特征进行验证,所提出的远控木马流量特征为远控木马检测提供了一种新思路。

Analysis on the operation principle and the flow characteristics of remote control type trojan

As the Internet is developing rapidly and people’s daily life have become increasingly tied to the Internet,the trojan of computer swoop in,which seriously harm the safety of the host computer in the network.This paper mainly aims at remote control type trojan,analyzes the operation principle and summarizes it’s flow characteristics,and then verifies them through a series of tests.The flow characteristics of remote control trojan proposed by this paper provides a new idea for detecting remote control trojan.