1)国家公安部信息安全专用产品销售许可证（XKC30492）National Ministry of Public Safety Information Security Product Sales License No. XKC30492
2)国家发展和改革委员会批准(发改高技[2004]2040号)列入“重大软件产业化专项”，是全国同类过滤产品唯一批准项目 National Development and Reform Commission Approval (NDRC Circular[2004]#2040) as "Major Software Industrialization Project", the only approved filtering software project of its kind nationwide
3)国家科技部（国科发技字[2004]449号）批准为“技术创新基金项目” Ministry of Science and Technology (MOST Circular[2004]#449) Approval for "technological innovation project funding"
4)国家信息产业部（信部运[2005]9号）批准为“电子信息产业发展基金项目” Ministry of Industry and Information Technology (MIIT Circular[2005]#9) Approval for "electronic information industry development project funding"
国家互联网违法和不良信息举报中心(net.china.cn)唯一正式推荐 Only the China Internet Illegal Information Reporting Center (ciirc.china.cn) has officially recommended Green Dam.
第九届中国国际软件博览会荣获金奖 Awarded first prize at the Ninth Chinese International Software Expo
2005中国郑州先进适用技术交易会金奖 First prize at the 2005 Zhengzhou Advanced Adaptive Technology Trade Fair
郑州市科技进步一等奖 First prize in technological advancement from Zhengzhou City
金惠公司营销服务中心电话：0371-63697160，63697161 Jinhui Marketing Service Center: 0371-63697160
传真：0371-63697171 Fax: 0371-63697171
目的和功能 Objectives and functions
以工信部，教育部，财政部和国务院新闻办为合作伙伴，绿坝目前有家庭版，厂商版，渠道版，网吧版以及校园版（家庭版与校园版经校验后发现完全一致，没有发现有官员版）。With the Ministry of Industry and Information Technology, Ministry of Education, Ministry of Finance and State Council Information Department as its partners, Greed Dam currently offers Family, Commercial, Organization, Internet Bar and Campus Editions.
There also exists a Network Edition of Green Dam, which can be downloaded here (.rar).
适用性 Applicability
虽然产品声明的目标是针对10-16岁青少年，但是产品的约定安装机器并没有选择性，产品缺省假设每台被安装的机器都是青少年使用。目前该产品只提供 Windows 版本，对IE、Google Chrome（因为采用了系统的网络设置）有效，对Firefox 无效。软件屏蔽的不良信息包括时政类的不良信息，软件并非采用一般软件的安装方式，对Firefox无效，关闭浏览器及将网址加入黑名单无确认。在IE下 ,对明显属于时政类“不良信息”的信息判断不稳定。对色情类“不良信息”的网页判断较准。换成Firefox后，软件没反应。
Current versions only support Windows; effective only when used in conjunction with Internet Explorer or Google Chrome, it has no effect when used with Firefox. The harmful information screened by the software includes politically-related harmful information, and the software relies on non-conventional methods to install, also ineffective within Firefox, closing the browser and adding the website address onto a banned list without confirmation. In Internet Explorer, the software's ability to classify clearly political content as "harmful information" is unreliable; for pornographic content, Green Dam is able to make relatively accurate assessments. When used with Firefox, however, the software shows no response.
产品当前支持的兼容性列表
Compatibility list of currently supported projects
序号 项目 内容 备注 Sequence / Item / Content/ Notes
操作系统 Operation Systems
1 Win98 兼容 不支持屏幕文字监控 1. Windows 98, compatible, text screening not supported
2 Win2000 兼容 2. Windows 2000, compatible
3 Winxp 兼容 3. Windows XP, compatible
4 Win vista 兼容 安装升级和卸载需管理员身份 4. Windows Vista, compatible, updates and uninstall can only be performed through User Account Control.
浏览器 Browsers
1 IE6.0/7.0 兼容 1. Internet Explorer 6.0/70, compatible
2 Opera 9.5 兼容 2. Opera 9.5, compatible
3 Firefox 2.0 兼容 3. Firefox 2.0, compatible
4 Netscape 9.0 兼容 4. Netscape 9.0, compatible
5 腾讯TT 3.0 兼容 5. Tencent Traveler 3.0, compatible
6 Maxthon 2.0 兼容 6. Maxthon 2.0, compatible
办公软件 Office Software
1 MS Office2003 兼容 1. Microsoft Office 2003, compatible
All files within "Green Dam-Youth Escort" are installed to the system directory (%WinDir% and %WinSysDir%), and while no means to uninstall are provided in the Applications menu, the option to uninstall can be found in a menu within the main program. When launching Green Dam's image filtering function, the software automatically clears the browser cache.
在%WinDir%目录下的xstring.s2g存放着该软件所有文件的安装路径。Within xstring.s2g, located in the Windows directory, there can be found all the installation paths for all the program's files.
运行时加载的模块：
驱动： C:Windows\system32\Drivers\mgtaki.sys
服务： C:Windows\MPSvcC.exe
启动项： C:Windows\system32\xnet2.exe
During operation, Green Dam installs the following modules:
Following evaluation, three applications, XDaemon.exe, XNet2.exe and gn.exe, can be seen to be protecting one another, preventing each process from being deleted or interrupted, a kind of technique used by malware...
After Green Dam converts the password using the MD5 algorithm, it saves it in text format within the kwpwf.dll file located in the C:\WINDOWS\system32 directory. When opened using Notepad, if the content is then replaced with "D0970714757783E6CF17B26FB8E2298F" and saved, the password can then be restored to the original "112233".
Green Dam updates automatically online, and the update address is: http://www.zzjinhui.com/softpatch/; found therein is a pretty woman picture http://www.zzjinhui.com/softpatch/Image0.jpg although its purpose is unknown. Following analysis by Internet users, it was discovered that the file http://www.zzjinhui.com/softpatch/kwupdate.dat is related to the filtering of keywords and URLs. Connected to that are two IP addresses: 211.161.1.134 and 203.171.236.231; the second of the IP addresses belongs to Zhengzhou Giant Computer Network Technology Co. Ltd. in Henan province. (zzidc.com.cn) - (unavailable since yesterday)
The process of image detection begins when visual data is obtaining as the image is in queue to be screened, first normalizing the image's size, then separating areas of skin tone from those without skin tone; analysis of the relationship between areas of skin tone is followed by removal of noises, then extraction of the area's characteristics, which are then input into a trained SVM classifier. Once the image has been deemed pornographic it is sent to a human face detector; if a human face is not the primary component, the image is then classified as pornography. The main problem with this algorithm is that recognition of pornographic images relies heavily on skin color and shape, and the final use of a human face detector in a weighted judgment is only a manual patch aimed at preventing the problematic occurrence of large faces being identified as pornography, but also the reliability of empirical weighting lacks verification.
From XFImage.xml it can be observed that Green Dam uses OpenCV's Haar classifier in undergoing human face detection. Included with Green Dam, cximage.dll, CImage.dll, xcore.dll and Xcv.dll, also library files from OpenCV. This all suggests that Green Dam primarily uses OpenCV to process images. However, as is done with much of domestic Chinese software, Green Dam has disregarded OpenCV's BSD license.
Jinhui Corporation has committed to an accurate image detection rate of higher than 90%, and a false detection rate of less than 7%, with the detection rate=accurate detection rate*proportion of pornographic images＋(1-false detection rate)*(1-proportion of pornographic images); with 1% of images being pornographic, the detection rate would be 93%.
An analysis of political content, including the filtering of Falun Gong-related content, shows that used is Beijing Dazheng Language Technology Co. Ltd.'s text filtering engine, HncEng.exe, HncEngPS.dll and SentenceObj.dll, and within data file HNCLIB/FalunWord.lib, in UTF-32LE code, aside from Falun Gong there can also be found a large glossary related to political and pornographic content.
A team from the University of Michigan has reverse-engineered and decoded the encrypted dat files installed by Green Dam to the system32 directory, finding that many of these encrypted files appear to be banned keyword lists from the US-made CYBERsitter censorware circa 2006, and other files of interest include several dat files which contain sexual and political terms, as well as others related to Falun Gong.
应用程序屏蔽 Application screening
对应用程序使用时间的控制 Regarding control over application usage time
Jinhui claims that Green Dam can disable kinds of online game, instant messager with customizable blacklists and whitelists for effectiveness, meanwhile block some anonymous browsing proxy software such as FreeGate.
Screening of anticircumvention software, such as FreeGate. In system32 there can be found a filtport.dat file whose default content reads: FreeGate/8567/tcp Urf/9666/tcp. Two processes, xdaemon.exe and xnet2.exe, upon entering FreeGate will......
控制技术 controlling techniques
金惠公司称，绿霸软件能够控制未成年人上网、QQ、MSN及游戏的时间，避免过度沉溺于网络，有效戒除网瘾（谈判响应书）；Jjinhui claims that Green Dam can controls the time minors spend online, using QQ or MSN, and playing games; by preventing overindulgence of the Internet, Green Dam effectively eliminates Internet addiction.
应用程序监控 application monitoring
经过测试，发现如果在记事本或者WordPad中输入任何“法轮功”字样，都会关闭应用程序，但是在绘图板和MSN中输入这些字则不会有反应，这也说明其程序的不完备性。Testing has shown that if any word resembling "Falun Gong" is entered into either Notepad or WordPad, the application will shut down; however, typing the same characters into Paint or MSN Messenger bears no response, illustrating the incompleteness of the the program.
部分反编译的内容发现有多种应用程序是其监控的对象。
A segment of decompiled content shows the extent of the Green Dam's monitoring.
It seems that nearly all text editors on the market (EditPlus, UltraEdit, EmEditor), office software suites (WPS, MS Office), e-mail clients, instant messaging clients and browsers, are being monitored.
In documentation, Jinhui claims that "Green Dam" utilizes the Winsock2 SPI port to obtain data from both sender and recipient, and through analyzing these data, obtains http data. Having obtained http data protocol and run through a URL detector, a harmful URL detector and a keyword detector, Green Dam decides based on those results whether or not image detection is needed, and through image detection, addresses of websites containing harmful information are delivered to system management.
通过实际测试和用户反馈，发现绿坝的宣称功能的实现能力并不强，却没有避免在各个层面添加很多没有宣称的功能。部分用户的使用体验和讨论：Through testing and user feedback, it has been noted that Green Dam's ability to achieve its stated function is in fact not that strong, and has not avoided including many additional undisclosed functions situated at various levels. Here is a sample of some users' user experiences and discussion:
Backdoor: The security of Green Dam itself is highly doubted; software developed by companies as small as this can easily contain security leaks which, once discovered by hackers, then compromise all computers having installed Green Dam. Given sufficiently high usage, Green Dam could easily lead to another "Baofeng" incident.
Given the many different imperfections in the Green Dam software, it's possible that Green Dam will cause normally-functioning client software to malfunction (for example, work not being saved during shutdown, or no reminder to save).
Because settings for the software's technical specifications have all been based on a technician's assumption of what constitutes pornography, these assumptions only further reinforce patterns in pornography, of gender inequality, detrimental to children.
