TrojanAntier: A Statistical Analysis Based Web Trojan Defense System

With the popularity of the internet, web services are increasingly becoming an essential part of people's everyday life and the people's life is becoming more and more convenient and colorful. At the same time when web services bring convenience to people's life, some new security problems emerge. The web-based malware has become the major threaten to users'computers. The web-based malwares not only broadcast very fast, but also the number increases very fast, so the problem how to defense the web-based malwares has become a new task of the secure research area.This paper researches on the characteristics of the internet and the web-based malwares. By comparing the difference between the web-based threaten and traditional threaten and leveraging the particular characteristics of the internet, this paper proposes a new web Trojan defense system called TrojanAntier. The goal of TrojanAntier is to make use of the evidence provided by victim computers and the data collected from the computers on the internet, with which the algorithm can calculate the Trojan URLs in a short time. Once a Trojan URL is verified, the Trojan URL will be blocked out of the users'computer forever.TrojanAntier is designed to be a client/server distributed system. The client has two tasks, one is to protect users'computers by blocking Trojan URL while the users are browsing web applications and the other one is to collect the data from users'computers and send the data to the servers. The server also has two tasks, of which one is to verify the users'requests and send back the results, and the other is to detect the Trojan URLs with the data from clients.TrojanAntier system cannot guarantee no computer be infected by web Trojan, but it can detect the Trojan URLs with the data collected from internet, thus it guarantees the security of the whole internet environment. The result of the experiments shows that TrojanAntier can effectively detect and block Trojans without affecting the user experience of web browsing obviously.