Model of Trojan's covert channel based on NdisHook
Lin Guo · Jisuanji gongcheng yu sheji · 2007
The attack intention of Trojan Horse is based on reliable covert channel.The core of covert channel is to evade the interception of host firewall.A model of Trojan Horse's covert channel based on NdisHook technology is put forward to avoid relier of the rules of host firewall.In the same time,the author validate the reliability of the model via experimentation to pass through host firewall.Finally some methods are presented to detect it.