摘要
为了减轻隐通道分析人员的负担,提出了一种基于信息流图的隐通道识别和分析方法.信息流图简单、直观地表现了信息从发送者经过特定的属性集合传播到接收者的过程.介绍了信息流图的构造方法和潜在隐通道的搜索方法.为实现隐通道的自动分析,提出了操作序列分析的6条基本规则并引入了等价操作序列的概念.开发了一个隐通道自动分析工具.实验结果表明该工具大大减轻了隐通道分析人员的工作量,同时能够产生所有真实的隐通道应用场景.
A technique is introduced for detecting covert channels using a graph structure called an information flow graph. The information flow graph can graphically illustrate the process through which information is relayed from the sender to the receiver via particular resource attributes. Algorithms for automating the construction of information flow graphs and potential covert channel operation sequences are presented. Six rules that a user can use to perform the analysis of the operation sequences were identified. Moreover, the notion of equivalent operation sequences was proposed to reduce the number of operation sequences. Based on these rules, a tool was developed to analyze the operation sequences automatically. Experiment results show this method can decrease the workloads for covert channel analysts remarkably, and can produce all true covert communication scenarios.
出处
《哈尔滨工程大学学报》
EI
CAS
CSCD
北大核心
2006年第5期742-747,共6页
Journal of Harbin Engineering University
关键词
安全操作系统
隐通道分析
信息流
信息流图法
secure operating system
covert channel analysis
information flow graph