NSUBug & BUGDect

This is a project of Computer Security - CSE 497 Project on a instance of BO2K (Back Orifice) and a detector program for the Trojan. The Trojan file is called “NSUBug” which uses various plug gins of BO2k to provide remote administration. The actual file is compressed and wrapped with other program and might be installed in remote clients in an unauthorized way and might cause security violation. The project consists of six (6) different variants of NSUBug manipulated for different purposes. The second part of the project was to develop an appropriate signature for this instance of BO2K (NSUBug). The program was written in Java and with eight (8) significant signatures those can successfully detect all the variants of NSUBug. This Trojan detector is called BUGDect. Both the Trojan (NSUBug) and the detector (BUGDect) are in beta phrase.

For more info and the files VISIT this link