Thinking and understanding of computer security issues and ideas of java RMI.

Thinking and understanding about the next Java rmi package.

APi in several important points.

interface:

  Remote,Registry

类:UnicastRmiObject, LocateRegistry

Abnormal: RmiException

Specific use nothing more than a remote interface extends Remote and throws RmiException

Remote Interface it extends UnicastRmiObject

registry bind impl。

note: API have used the above method. For more details refer to the RMI Specification API in Remote Interface

These classes are encapsulated specific implementations. Do not look at the source code, think of Java-based knowledge system. Understood as follows:

When the remote service method call is nothing more than connecting socket, as well as the use of reflective invoke this method, then returns the result of it.

If some network control protocol, the package is nothing more than a concrete realization of it.

Computer backdoor nothing more than the use of a number of loopholes in the service, the ability to upload your own horse, and then bind it to the registry service. And open ports. Which can hack into it. Of course, how to camouflage them services and ports not go into. A large area of ​​the computer being attacked, nothing more than exploit these services.

Guess you like

Origin www.cnblogs.com/futureT/p/12010252.html