分布式木马检测系统设计实现

摘要

随着网络安全问题日益严重,网络攻击手段层出不穷.特洛伊木马程序作为一类主要的恶意代码,在侵犯个人隐私、远程监控他人电脑方面给计算机用户带来巨大困扰.实现一个分布式的木马程序检测系统,将深度包检测技术应用到检测木马程序上,使用正则表达式匹配攻击模式检测木马程序,加强了网络的安全.%Networks attack means emerge endlessly along with the growing serious network security problems. As a kind of main malicious code, Trojan horse program brings great troubles to computer users in the areas of infringing personal privacies and remotely monitoring the computers of others, etc. The authors implement a distributed Trojan horse program detection system by applying the deep packet inspection technology to the detection of Trojan horse program, we use regular expression to match the attack mode in detecting the Trojan horse program, therefore have strengthened the security of networks.