HTTP隧道木马原理分析及检测方法研究

Analysis on HTTP Tunnel Trojan's Theory and The Exploration of Detection Methods

随着防火墙技术和各类安全监测技术的发展,木马也随之不断升级。为了穿透防火墙的阻隔,一种新型的利用HTTP隧道技术的木马随之诞生。对该类木马的运行原理进行了阐述,并对当前主流HTTP隧道木马检测技术进行了分析。

As firewall technology and all kinds of safety monitoring technology development, the Trojan has escalated. In order to penetrate firewai1 cut off, a new type of Trojan using HTTP tunnel technology comes. At first, this paper intro- duces the kind of Trojan＇s theory simply, then analyses some main stream detection methods.