@inproceedings{6383f093b71b46d9bc69034300d59316,
title = "Prototype demonstration: Trojan detection and defense system",
abstract = "This paper presents a novel Trojan detection and defense system. The prototype searches the important files which contain users' confidential information on the disk. And then, these files will be monitored to find which processes will access them by capturing and analyzing the IRPs (I/O Request Packets). The processes of Trojans will be distinguished from regular ones by evaluating their API-calls with several machine-learning models, rather than traditional signature-based mechanism. Testing results show that this prototype could detect and defend the unknown Trojans quickly and accurately.",
keywords = "API, IRP, Network security, Trojan",
author = "Ting Liu and Xiaohong Guan and Qinghua Zheng and Ke Lu and Yuanfeng Song and Weizhang Zhang",
year = "2009",
doi = "10.1109/CCNC.2009.4785028",
language = "英语",
isbn = "9781424423095",
series = "2009 6th IEEE Consumer Communications and Networking Conference, CCNC 2009",
booktitle = "2009 6th IEEE Consumer Communications and Networking Conference, CCNC 2009",
note = "2009 6th IEEE Consumer Communications and Networking Conference, CCNC 2009 ; Conference date: 10-01-2009 Through 13-01-2009",
}