IPv6中的网络隐蔽通道技术研究  

Research on network-based covert channels in IPv6

作　　者：杨智丹[1] 刘克胜[1] 李丽[2] 

机构地区：[1]解放军电子工程学院网络工程系,合肥230037 [2]国防科学技术大学计算机学院,长沙410073

出　　处：《东南大学学报（自然科学版）》2007年第A01期141-148,共8页Journal of Southeast University：Natural Science Edition

摘　　要：为了扩展和丰富信息隐藏的载体,探讨了使用IPv6数据包进行信息隐藏的可能性.针对IPv6的不完善之处,对IPv6协议的数据包格式进行了详尽的分析,在此基础上发现了IPv6数据包中存在保留字段、转发时被节点忽略的字段、定义不完整字段和非关键字段等可隐匿信息的字段.这表明IPv6的冗余字段太多,协议设计时语法规则限定过宽,从而得出IPv6数据包是信息隐藏的良好载体的结论.上述字段构成了对象排序隐蔽通道等19种新的网络隐蔽通道,可用于特定目的的网络隐蔽通信.归纳了这些隐蔽通道的类型,对不同类型的隐蔽通道进行了阐述,最后对IPv6网络隐蔽通道的研究方向进行了展望.For extending and diversifying the carrier of information hiding, the possibility of concealing messages in IPv6 packets is discussed. Focusing on the flaws that root in designing of IPv6＇s syntax rules, the format of IPv6 packets is analyzed in detail. The fields including reserved field, not consummate-defined field, no-crucial field and field ignored by node when transmitting are disclosed, and they can be used to conceal information. This indicates that IPv6 have too many redundancy fields and syntax rules restriction is loose. Thus it can be concluded that IPv6 packets are good carrier for information hiding. These fields form 19 new network covert channels including object sorting channel, which can be used for the network covert communication with special purpose. In this paper, these covert channels are classified into five types, and in each type the covert channels are expounded. Finally, the direction of investigating the network-based covert channel in IPv6 is pointed out.

关 键 词：信息隐藏 隐蔽通道 网络协议 IPV6 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]