A Trojan Horse Detection Technology Based on Behavior Analysis

This paper presents the model of the Trojan-detection system which is based on behavior analysis. Through the abstract description of the Trojan´s behavior, according to certain rules to establish a behavior feature database, and combining the heuristic analyzer to further analysis and then to judge whether the program is the Trojans, at last the system does the appropriate processing. The experiments show this method is effective and efficient in real time and light load, and can be used to in practice to monitor the computer system in real time.