随着网络的快速发展,窃密木马程序的普遍性与危险性与日俱增。在现有的木马检测技术中,特征码检测技术具有一定的准确性与高效性,但仍无法检测未知的恶意程序,对于一些已知恶意软件的变种也难以及时检测。本文针对特征码检测技术不足,提出一种基于家族基因的窃密木马检测模型,即根据已知窃密木马及其变种,建立族群标识识别模型库,以便快速识别窃密木马变种,通过系统设计、系统实现和仿真分析,说明该方法在木马检测方面的准确性。 With the rapid development of the Internet, the universality and danger of the theft of Trojans are increasing day by day. Among the existing Trojan detection techniques, signature detection technology has some accuracy and efficiency, but it still can not detect unknown malicious programs, and it is difficult to detect some known malware variants in time. In this paper, aiming at the deficiency of signature detection technology, this paper proposes a detection model based on family genes, which is based on the known Trojans and their variants to establish ethnic identification model library to identify Trojans quickly through system design and system implementation And simulation analysis, indicating the accuracy of the method in Trojan detection.