A dynamic backdoor detection system based on Dynamic Link Libraries

Shi-Jinn Horng, Ming-Yang Su and Ja-Ga Tsai

International Journal of Business and Systems Research, 2008, vol. 2, issue 3, 244-257

Abstract: We present a two-layer backdoor detection system in the article. In the first-layer, Zhang and Paxson's method is applied to identify keystroke interactive connection from network traffic. In the second-layer, we adopt the Dynamic Link Library (DLL) injection technique to record all DLLs employed by the programme that evokes such interactive connection. Compared the recorded data with some pre-defined Common Feature Tables, the second-layer can then determine whether the monitored programme is a backdoor. By experiments, the best result of our system got 94.44% detection rate while False Positive was zero. In the case, the overall accuracy was 97.22%.

Keywords: backdoor detection systems; backdoor programmes; DLL; dynamic link libraries; DLL injection; electronic commerce; e-commerce; internet security; keystroke interactive connections. (search for similar items in EconPapers)
Date: 2008
References: Add references at CitEc
Citations:

Downloads: (external link)
http://www.inderscience.com/link.php?id=20577 (text/html)
Access to full text is restricted to subscribers.

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:ids:ijbsre:v:2:y:2008:i:3:p:244-257

Access Statistics for this article

More articles in International Journal of Business and Systems Research from Inderscience Enterprises Ltd
Bibliographic data for series maintained by Sarah Parker ().