下一代木马的关键技术方向探究  

The Next Generation of Key Technology Direction of Trojan

作　　者：杨晋[1] 杨永[2] 陈瑊[3] 

机构地区：[1]江苏技术师范学院商学院,江苏常州213001 [2]陕西省公安厅,陕西西安710061 [3]南京邮电大学海外学院,江苏南京210046

出　　处：《信息网络安全》2012年第12期39-41,共3页Netinfo Security

摘　　要：研究下一代木马技术的原理和发展方向,是当前计算机安全领域亟待解决的问题,也是未来信息对抗中掌握网络控制主动权的重要环节。根据木马程序多年发展中技术和功能不断演进的趋势,在深入分析目前常见木马的工作机制、主要技术手段以及反木马检测技术手段的基础上,预设一个由主控端群、被控端群和服务中心三部分组成的下一代木马体系结构模型。基于该模型的功能和特点,重点对公钥+私钥的远程控制体系结构、全新的特征隐藏、复杂的通信协议和跨平台执行中所涉及的关键技术进行了分析研究。Research of next generation Trojan technology principle and development direction,is the field of computer security problems to be solved,but also the future of information confrontation in the master network control initiative the important link.According to the Trojan program after years of development in technical and functional evolution trends,in-depth analysis of current common Trojan working mechanism,main technical means and anti Trojan detection technology based on means,a preset by the main control end group,accused the end group and service center is composed of three parts of the next generation of Trojan horse system structure model.Based on the model of the functions and features,focusing on Key ＋ the private key of the remote control system structure,new features of hiding,complex communication protocol and cross-platform implementation of the key technology was analyzed.

关 键 词：木马程序 远程控制 特征隐藏 通信协议 服务中心 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]