Research On Trojan Horse Transmis Sion Technology Based On HTTPS And WEB SERVICE Shanghai Jiao Tong University

Computer Trojans have been acknowledged by more and more people while computer network is changing the way people live, work, play and learn. As the improvement of security sense of common people and the in-formation security defense technology, it becomes more and more difficult for a Trojan to retrieve users' data and transmit it outside the local network suc-cessfully. Nowadays, firewalls and IDS have been installed on most of the in-ternal network, and even if a Trojan successfully invades a computer, the us-er's data that is transmitted from the Trojan client would be blocked by the firewall. In this paper, a new type of Trojan client that uses https and anony-mous Diffie-Hellman protocol is introduced whereby the users' data can be smoothly transmitted outside the internal network without being blocked by a firewall. Also, in this paper a new kind of Trojan server which is based on restful web services is introduced whose name is UTMCS which means Uni-fied Trojan Monitoring and Control System. The system can be used not only for aggregating and displaying the data that Trojans get but also for distrib-uting the commands to control Trojan clients. The whole system is tested and validated in GNS3 environment, and it turns out to be a great Trojan transmit-ting, monitoring and controling system.