匿名HTTPS隧道木马的研究  

Study on HTTPS Tunneling Trojan with Anonymous Diffie-Hellman Protocol

作　　者：刘超[1] 王轶骏[1] 施勇[1] 

机构地区：[1]上海交通大学信息安全工程学院,上海200240

出　　处：《信息安全与通信保密》2011年第12期78-80,共3页Information Security and Communications Privacy

摘　　要：随着防火墙技术的提高,木马已无法轻易完成盗取用户信息并向外传输的任务。木马传输的用户信息往往会被防火墙阻挡,从而使木马无法自由与外界通信。文中旨在研究和实现一种可以穿越防火墙的木马传输技术,它通过把用户数据封装在HTTPS数据包内加密传输,从而达到穿越防火墙的目的。该木马采用OpenSSL库来实现加密通信。实验证明,该方法可以穿透常用商用防火墙,从而实现木马与外界自由隐蔽通信的目的。With the improvement of firewall technology, it is hard for a Trojan to steal and transmit outside the user＇s data. Nowadays, software firewall is pre-installed on most PCs and servers, and even if a Trojan is successfully transmitted to a target host, the transmitting of user＇s data would be blocked by the firewall. A new type of Trojan that uses HTTPS and anonymous Diffie- Hellman protocol is proposed, whereby the user＇s data could be easily transmitted outside without being blocked by firewall.

关 键 词：HTTPS隧道 匿名Diffie—Hellman木马 OPENSSL 穿越防火墙 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]