当前,互联网中受控网络的规模和类型持续增长,但是针对受控网络检测方法主要还是片面的分为系统行为检测和网络流检测。本文深入研究了受控网络的命令与控制信道以及受控网络的行为特点,设计了一种基于终端系统行为特征和网络行为特征的混合式受控网络检测算法。 At present, the scale and type of controlled networks in the Internet continue to grow, but for the controlled network detection methods are mainly one-sidedly divided into system behavior detection and network flow detection. In this paper, the command and control channels of controlled networks and the behaviors of controlled networks are deeply studied. A hybrid controlled network detection algorithm based on terminal system behavior characteristics and network behavior is designed.