Protection method and protection system for corpse Trojans in mobile Internet

Abstract

A method and system for protecting zombies and Trojan horses in the mobile Internet, relating to the field of information security. The protection method comprises the following steps: step S1, capturing mobile Internet users' Internet access network data packets; step S2, detecting mobile zombie Trojan horses; step S3, performing mobile zombie Trojan horse activity detection; step S4, detecting mobile zombie Trojan horses and mobile zombie Trojan horses found Activities are alerted and protected. The protection system includes a network packet capture module, a mobile zombie Trojan horse detection module, a mobile zombie Trojan horse activity detection module, and a mobile zombie Trojan horse alarm and protection module. A method and system for protecting zombie Trojans in the mobile Internet of the present invention can effectively detect known mobile zombie Trojans and have the ability to detect unknown mobile zombie Trojans, can effectively detect known mobile zombie Trojan activities and have the ability to detect unknown mobile zombie Trojans activity capacity.

Description

technical field [0001] The invention relates to the field of information security, in particular to a method and system for protecting zombies and Trojan horses in the mobile Internet. Background technique [0002] The Trojan horse is a remote hacker control tool. Once the user is infected with the Trojan horse, the information on the user's computer will be exposed to the hacker. The Trojan horse technology mainly adopts a one-to-one control technology, that is, hackers control the computer infected with the Trojan horse, and the main purpose is to steal information on the client's computer. Compared with traditional Trojan horse technology, botnet is a distributed network attack platform developed on the basis of traditional computer virus, Trojan horse and worm technology. It uses IRC, HTTP, P2P and other technologies to form a large-scale controlled zombie network with multiple zombie machines. Using this controlled botnet as an attack platform, on the one hand, this a...

AI Technical Summary

Problems solved by technology

(2) User expenses. Since the Internet access fees of mobile smart terminals are still relatively high, users can obtain the detailed fees through the operator's bill. If the fees are high due to frequent zombie Trojan activities, users can easily find out

Therefore, mobile zombie Trojans will use more covert techniques to avoid being discovered by users, and their activities will be more difficult to be discovered

In this way, it is difficult for the traditional detection system to collect enough information, and the detection is extremely difficult

Images