Heuristic Trojan Identification System Based on Network Communication Fingerprint
Jian Zhang · Jisuanji gongcheng · 2011
This paper discusses the trojan detection technique,and a detail contrast research of related characters is given.In order to provide trojan detection based on network data flow,a trojan identification method based on network communication fingerprint is broutht forward.The concept of communication fingerprint is introduced to expand the extension of the communication features.Through the experimental method the fingerprints information of trojan for each phase such as connection,control and file transfer can be highlighted.On that basis,a heuristic identification system for trojan based on network communication fingerprint is designed and implemented.Test results indicate that the system runs efficient and the results are accurate.