后门检测系统的Win32应用程序设计与实现

Design and implementation of back-door detecting system against win32 application

介绍了后门检测系统的设计,以及各模块实现拟采用的方案,包括:网卡数据包的截获,进程和端口号的映射,截获包的解码与分析和数据库设计等。

The design of the back-door detecting system is presented and the scheme is used to implement the major modules in the back-door detecting system including the capture of NIC data packets, the mapping of the process to port, the analysis of the captured data packets and the design of database.