基于IGMPv2的隐蔽通道

Covert Channel Based on IGMPv2

目前IP组播技术应用越来越广泛,其应用的协议是IGMP,该协议不断完善,版本不断升级,安全性也得到了提高。但是,在目前应用最广的IGMPv2中,可以实现隐蔽通道,最明显的是协议包中的“路由器检测选项”字段和“最大响应时间”字段。该文主要针对如何使用这两个字段实现隐蔽通道加以讨论。介绍了隐蔽通道和IGMP的基本概念,说明了该隐蔽通道的实现原理,描述了软件设计,最后对该方法进行了分析。

Now IP multicasting is more and more widely used. The protocol that serves for it is IGMP. It has upgraded from version 1 to version 2 and then version 3. It has been more and more perfect and its security is raised. Now IGMPv2 is the most widely used in the three versions. But there are some fields in the IGMPv2 can be used to implement covert channel. For example, there are ＂Route Alert Option＂ and ＂Max Response Time＂. The paper discusses how to implement covert channel based on these two fields. First, the paper introduces the concept of covert channel and IGMP. Secondly, it discusses how the covert channel works on IGMP. The third is how to design the software. Finally, the paper analyses the method.