网络流量伪装技术研究  

Survey on network traffic camouflaging

作　　者：张连成[1] 王振兴[1] 苗甫[1] 

机构地区：[1]解放军信息工程大学信息工程学院,郑州450002

出　　处：《计算机应用研究》2011年第7期2418-2423,共6页Application Research of Computers

摘　　要：根据伪装目标的不同,将流量伪装分为流量抗发现、流量低截获、流量身份伪装和流量模式伪装。首先对流寄生、隧道承载和流量变换等流量抗发现技术进行简要介绍,阐述流量分散、端口跳变和地址跳变等流量低截获技术;然后介绍匿名通信、跳板和地址伪造等流量身份伪装技术,对流量填充、流量规范化和流量掩饰等流量模式伪装技术进行概述;最后总结和展望网络流量伪装技术存在的问题及发展前景。According to the different camouflaging purposes, traffic camouflaging technologies can be divided into four categories ：traffic anti-awareness, traffic anti-interception, traffic identification camouflaging and traffic pattern camouflaging. Firstly, this paper briefly discussed flow parasite, tunnel encapsulation and traffic morphing technologies, next introduced traffic dispersion, port hopping and network address hopping technologies, after that, described anonymous communication, stepping stone and address spoofing technologies, then represented traffic padding, traffic normalization and traffic masking technologies, finally, summarized and discussed existing problems and near future research directions of traffic camouflaging technologies.

关 键 词：流量伪装 流量变换 端口跳变 匿名通信 跳板 流量填充 流量规范化 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]