Dissertation > Excellent graduate degree dissertation topics show
The design and implementation of the detection and alarm system based on Trojan behavior characteristics
Author: YinYiZuo
Tutor: ZhangXiaoSong
School: University of Electronic Science and Technology
Course: Software Engineering
Keywords: Trojan behavior-based detection kernel driver file system behavior analysis
CLC: TP393.08
Type: Master's thesis
Year: 2009
Downloads: 395
Quote: 2
Read: Download Dissertation
Abstract
|
With the increasing popularity of network and rapid development of computer technology, "Computer Virus", "Trojan" and "Dove Gray" have become known by the public. More or less, people have encountered network attacks such as "Game Thieves", "Password Lose", "Stolen of Important Data". Network not only brings us convenience and happiness but incurs threats. Network security has become a pressing practical problem.Trojans are quite different from viruses. The design of virus focuses on concealment, pervasion, spreading and destruction, while the design of Trojan concentrates more on the aspects of the specialty, concealment, control, anti-detection and anti-uninstallation. The traditional firewalls and anti-virus products mainly depend on signature -based technique, so it is hard to detect and erase unknown Trojans. Hence, there should be a new roadmap to detection Trojans.Based the background above, we analyzed one major threat of network security: Trojans as well as their principle, implementation, damage and development, traditional anti-virus techniques and corresponding drawbacks. Based on this, we designed and implemented a new, behavior-based Trojan detection and alarming system. Our main contributions of this thesis are:1.Analyzed and summarized the classification, principles, key implementation mechanisms, and advanced self-protection means of Trojan.2.Analyzed and summarized the development, principles and techniques of anti-Trojan approaches.3.Analyzed and compared current anti-Trojan techniques, and point out their merits and shortcomings.4. Designed and implemented a new behavior-based Trojan detection and alerting system in Windows platform.5. Discussed design principle of the system and various key techniques: including comprehensive behavior analysis, file system hooks, Irp packet capture and analysis, kernel driver monitor etc. 6: Made a test on the key parts of our system, while giving the testing data. The test results showed that our system could effectively detection unknown Trojans.
|
Related Dissertations
- Based on WINDOWS platform file security mechanism,TP309
- Research on Wear Leveling Strategy of Satellite Multi-Chip Flash Memory,TP333
- Research of the Important Technology of Flash File System Based on Large Capacity NAND Flash Memory,TP333
- Analysis and Design of Flash Storage Management in Embedded System,TP368.1
- The Design and Development of Real Time Operation System Base on Arm Processor,TP316.2
- Research on Management of Enterprise Sales Team,F224.32
- ECos and the ARM7 sewage line monitoring transmission terminal - based Design and Implementation,TP311.52
- A Mobile Internet Business Recommendation Model Based on Data Analysis of User Behavior,TP311.13
- The Wireless Virtual Storage System Based on WiFi,TN929.5
- Research of Dynamic Association Rules,TP311.13
- Polling IP -based network protocol implementations,TP311.52
- Research and Implementation of the File System Based on NAND Flash,TP333
- File System Management for SD Card Based on Remote Controller,TP273
- The Research and Implementation of An Instant Messenger Monitoring System Based on DPI,TN915.09
- Study on Key Technology of AVCHD Nonlinear Editing System,TN948.4
- Design and Implimention of Metadata Server High Availability in Distributed File System,TP368.5
- The Measurement and Optimization of Parallel File System in Mass Storage System,TP333
- Design and Implementation of the WEB Proxy for Mass Storage System,TP393.05
- The Design and Implementation of an Embedded GIS Map Engine,P208
- Analysis of a new bypass attack and defense policy studies,TP309
- Airport VIP Services Analysis System Design and Implementation,V351.3
CLC: > Industrial Technology > Automation technology,computer technology > Computing technology,computer technology > Computer applications > Computer network > General issues > Computer Network Security
© 2012 www.DissertationTopic.Net Mobile
|