基于BHO的网络隐蔽通道研究  

Research of Network Covert Channel Based on BHO

作　　者：王娟[1] 郭永冲[2] 王强[3] 

机构地区：[1]南开大学信息技术科学学院,天津300071 [2]中国人寿保险股份有限公司信息技术部,北京100020 [3]西安空军工程大学电讯工程学院,西安710077

出　　处：《计算机工程》2009年第5期159-161,164,共4页Computer Engineering

摘　　要：针对现有网络隐蔽通道在流量隐藏和代理穿透方面的不足,提出一种基于浏览器帮助对象(BHO)构建网络隐蔽通道的方法。BHO自身的"合法性"和"寄生性"不仅为躲避杀毒软件和防火墙提供天然屏障,而且能为流量隐藏和代理穿透提供有利条件。该文给出详细方案设计和代码框架,通过测试验证该隐蔽通道的有效性。针对其可能带来的危害,提出防御建议。To alleviate the weakness of existed network covert channels in traffic concealing and proxy penetration, a new method of constructing covert channel based on BHO is proposed. The method using Internet space such as webmail, blog or bbs to transfer information. The legality and parasitic hess of BHO provides protection against anti-virus software and firewall, and make it easy to conceal traffic and penetate proxy. Detail design and code framework are given, tests are done to validate the network covert channel. Some advice are given to protect against this kind of network coven channel.

关 键 词：网络隐蔽通道 浏览器帮助对象 流量隐藏 代理穿透 网络安全 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]