摘要
网络隐蔽信道是一种特殊的网络通信机制,它以正常信道为载体,能够无视系统安全策略的设置,在不同的安全实体之间传输敏感数据。由于网络隐蔽信道检测难度大,它通常被恶意攻击者视为一种理想的数据窃取手段。但是,网络隐蔽信道很容易受到网络状况变化的影响,使得信道的解码出现错误,甚至使信道无法正常工作。提出一种对网络状况变化具有较强自适应能力的、基于时间划分的网络时间式隐蔽信道,它将隐蔽信息调制在单个网络包的时间信息之中,并以正常信道的数据包作为伪装,能在收发双方之间以较高的可靠性传输数据。实验结果显示所提出的隐蔽信道能够高效地在各种网络环境下传输隐蔽信息,并且能保持较高的传输正确率。
Network covert channel is one of the special network communication channels,it uses legitimate channels as its carrier,and can transfer information between different security entities in such a way that violates system security settings. Because of the difficulty in detecting their existence,network covert channels are thought to be an ideal way to steal information by most adverse attackers. But they are vulnerable to network jitters,which causes decoding error,and sometimes hinders them from working properly. This paper proposed a time-segmentation based covert channel that had strong adaption to network＇s ever changing conditions. It encoded covert information into a single packet＇s timing information,and used legitimate traffic as cover and transfers information between senders and receivers reliably. Experiments show that the proposed channel can transfer information efficiently in various conditions of different network environment,and can achieve high correct rate.
出处
《计算机应用研究》
CSCD
北大核心
2014年第8期2502-2505,共4页
Application Research of Computers
基金
国家自然科学基金资助项目(61170035)
关键词
隐蔽信道
网络安全
信息窃取
covert channel
network security
information leakage
