New Fast Monitor Methods of Trojans under High-Speed Network Environment
Xinxin Niu · Journal of Henan University · 2011
In order to meet the needs of the up-to-date development of the Internet and Trojan Horse,and resolve the problem that current traditional IDS lacks the capability to detect Trojan Horse under high speed Internet environment,we proposed a single-engine method for detecting Trojan horse based on a huge set of characteristics.With the analysis of the Trojan horse's network data characteristics,and the optimization of the transition process of finite automation,our method can reduce the compiling time,avoid repeated matching,and increase the efficiency of Trojan Horse detecting methods based on regular expressions.