基于IP报头选项的网络隐蔽通道技术  

Network Covert Channel Technique Based on IP Header Option

作　　者：杨智丹[1,2] 刘克胜[1] 王康[1,3] 汪松鹤[1] 

机构地区：[1]电子工程学院网络系 [2]66019部队 [3]江南计算技术研究所

出　　处：《计算机工程》2009年第13期125-127,共3页Computer Engineering

摘　　要：为扩展和丰富协议隐写的载体,研究使用IP报头选项进行信息隐藏的可能性。通过对协议规范的分析,发现对选项指针字段的改写可以在选项字段中形成4种新的隐蔽通道。讨论这些隐蔽通道的原理,在模拟真实互联网的环境下实现防止路由器改写的IP选项通道,并结合网络隐蔽通道检测技术研究的最新进展分析对抗隐写分析应采取的措施。In order to extend and diversify the carrier of protocol steganography, the possibility of concealing messages in IP option is studied. After analyzing the standard of network protocol, four new covert channels can be established in IP header through rewriting of option＇s pointer field. The principles of covert channels are discussed and channels which can avoid router to overwrite are implemented at Internet circumstance by simulation. The countermeasure to steganalysis which should be taken is analyzed with newest development of network covert channel＇s detection.

关 键 词：信息隐藏 协议隐写 IP报头选项 网络隐蔽通道 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]