Long-range control method and system

Abstract

The invention pertains to the field of network communication security, which particularly relates to a remote control method and remote control system. The invention adds modules into a service end and a control end; the service end is arranged in a computer to be controlled and initiatively connected with the control end; improvement is carried out according to the mechanism of firewall or intrusion detection systems; the firewall or the intrusion detection systems are penetrated initiatively, thus easily traversing interception and realizing the purpose of covert communication.

Description

technical field [0001] The invention relates to the field of network communication security, in particular to a remote control method and a remote control system. Background technique [0002] Most of the early remote control systems were in the C / S mode, that is, the client and the server communicate with each other. The more common ones are pcAnywhere and so on. In addition, Trojan horse programs such as Glacier, Black Hole, Gray Pigeon, etc. are software of this type of communication mechanism. [0003] There are two traditional communication methods, one is forward connection, that is, the control terminal program actively connects to the designated port opened by the server, and the other is reverse connection, that is, the control terminal first opens a port to listen to a local port and waits for the service. end connection. Early firewalls were very sensitive to unsolicited connections, and reverse links were more penetrating. With the continuous improvement of ne...

AI Technical Summary

Problems solved by technology

[0004] At present, most of the software firewalls rely on the operating system NDIS (middle layer driver) to manage the process communication through their own drivers, and use firewall rules to control the network communication of the process. 90% of the software firewalls are monitoring. To prevent intrusion, this is the main reason why using remote thread injection to IE browser can break through the firewall, because the firewall defaults the IE process to allow access to the network, and the server of the Trojan horse operates in the form of a thread in the IE process , so it can easily penetrate the interception of the firewall, but antivirus software developers or some security software developers have discovered this kind of problem, and have targeted IE and Explorer with stricter rules and management, which has greatly blown Such attacks

Images