网络时间隐蔽通道的拟合模型特性研究

Analysis on Fitting Model of Network Covert Timing Channel

随着计算机网络的飞速发展,网络安全越来越受到人们的关注。在众多的攻击手段中,网络隐蔽通道已成为威胁计算机安全的重要来源之一。由于其隐蔽性较高、不易被发现和传输速率高等特点,网络时间隐蔽通道已成为该领域的研究热点之一。针对网络时间隐蔽通道的传输过程,构建了一种模型,并详细阐述了该模型中运用扩展码对隐蔽信息进行编码和调制的过程。在此基础上,分析了该模型下编码符号的概率分布状况,并与正常信道中的泊松分布拟合函数做了比较全面的对比。针对隐蔽通道的特性——隐蔽性和数据传输速率,首次分析了模型中的参数对其隐蔽性和传输速率的影响,并得到了二者之间的变化关系,这对今后网络时间隐蔽通道的构建工作具有一定的指导意义。

With the rapid development of computer network, the security of computer network has caused more and more peoples＇ attention. Among lots of methods of network attack, network covert channels have become one of the main threats to the security of computers. Because of its undetectable nature and high data transmission rate, covert ti- ming channel has become one of current research hot spots in the field of information security. This paper constructed a model for the transmission process of network covert timing channel. The model describes how to encode and modulate covert messages using spreading code. On the basis,we analyzed the probability distribution of the constructed model, then made a more comprehensive contrast with the Poisson distribution which is used to fit the legitimate channel. Ai- ming at analyzing the concealment and data transmission rate of covert channels, we first analyzed the parameters which impact the above properties of covert timing channels, and also discussed the relationship between these properties, which has certain significance for the future work of network covert timing channels.