基于控制协议弱点的隐蔽通信研究

Covert Communication based on Control Protocol Vulnerability

随着互联网和网络安全的发展,隐蔽通信成为信息秘密传输的一种重要方式。隐蔽通信将信息隐藏在协议包的特定字段中,使其在传输过程中不被第三方发现。控制协议的引入扩展了隐蔽通信的功能。然而,控制协议自身的弱点也成为攻击隐蔽通信的有力武器。研究隐蔽信道控制协议的弱点,以ICMP隐蔽信道工具Ping Tunnel为例,分析其控制协议的弱点,以及利用其弱点实施隐蔽通信阻断的方法。最后,提出控制协议的研究展望。

With the development of Internet and network security, covert communication now becomes an important way for transmitting secret information. Information in covert communication is hidden in a particular field of protocol packets, so as not to be found by a third party during transmission. The introduction of control protocol extends the functionality of covert communication. However, the weakness of the control protocol itself thus becomes a powerful weapon for attacking the covert communication. The vulnerabilities of covert channel control protocol are discussed. With ICMP covert channel tool Ping Tunnel as an example, the weakness and blocking methods of control protocal are analyzed. The article concludes with future research prospects of control protocol.