高安全级网络中信息隐蔽传输分析及检测  

Analysis and Detection of Covert Information Transfers in MLS Network

作　　者：蔡智勇[1] 张兴[2] 沈昌祥[2] 

机构地区：[1]浙江大学计算机学院,杭州310027 [2]北京工业大学计算机学院,北京100124

出　　处：《北京工业大学学报》2011年第8期1226-1230,共5页Journal of Beijing University of Technology

基　　金：国家'八六三'计划资助项目(2006AA01Z440);国家'九七三'计划资助项目(2007CB311100;2007CB31307107)

摘　　要：针对一种难以用隔离设备消除的、以夹带方式在确定概率分布中隐蔽信息的传输方法,提出了修改的属性偏移检测法和卡方检测法,前者用多个报警值门限来降低多单值检测导致的虚警率,后者选取部分近似均匀概率并进一步合并来提高检测效率.2种方法均不同程度地提高了检出概率.Regarding the issue of network covert channels hidden in overt sources with fixed probability distribution, two detection methods are proposed. One is an improved attribute shift test and the other is a modified Pearson chi-square test. In attribute shift test we use k warnings instead of one warning to indicate detection. In chi-square test we incorporate adjacent probability values. The two methods improve detection accuracy in different degrees. Advantages of the detection methods are verified by experiments.

关 键 词：网络安全 信息技术 统计分析 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]