Computer-readable storage medium for tracing Trojan horse source and Trojan horse source traceability system using the medium

Abstract

The invention relates to the technical field of the network security, and especially relates to a computer readable storage medium for tracking a Trojan source. A computer program is saved in the medium, and the computer program can be executed by a processor of a Trojan source tracing system. The Trojan source tracing system is deployed on a network server, the processor of the Trojan source tracing system acquires local Trojan data of a server side in which the Trojan is implanted, client address information for controlling or attempting to control the server side can be found by analyzing the content of the local Trojan data, and then the client can be found along the client address information, and the data of the client is analyzed. The client in which the Trojan same as that in the server-side is not implanted is a host used by a criminal offender for implanting the Trojan in all probability, the criminal offender certainly needs the client to process the information acquired from the server side, and the IP address used by the criminal offender can be identified by analyzing an access log of the storage address of the information, and the Trojan source is found.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a computer-readable storage medium for tracing the source of a Trojan horse. The medium stores a computer program, and the computer program can be executed by a processor of a system for tracing the source of a Trojan horse. Background technique [0002] With the development of communication technology and the popularization of the Internet, people pay more and more attention to network security issues. As a common network hazard, Trojan horses mainly come from phishing webpages, webpages linked to horses, and emails / pictures containing threatening IPs, domain names, and URLs. etc. People's active or passive communication behaviors in the network may cause computer terminals or servers to be implanted with Trojan horses, which will cause more and more losses to users' information security and economic interests. [0003] At present, the detection of Trojan horses mainly ...

AI Technical Summary

Problems solved by technology

However, there are too many types of Trojan horses, and some Trojan horses will send the information obtained from the client to a mailbox, or connect to an overseas / false IP address, or even some network space, which makes it extremely difficult to trace the source of the Trojan horse