利用共享文件实现的网络隐蔽通道模型  

Implementation of network covert channel model based on shared file

作　　者：王标[1] 张世韬[2] 方颖珏[3] 

机构地区：[1]国际关系学院信息科技系,北京100091 [2]清华大学软件学院,北京100084 [3]深圳大学数学与计算科学学院,广东深圳518060

出　　处：《计算机应用》2012年第1期78-81,共4页journal of Computer Applications

摘　　要：网络隐蔽通道技术是一种利用网络通过绕过强制访问控制措施而建立起的违背BLP模型的信息泄露秘密信道,这给高密级信息的机密性造成了威胁。首先探讨了隐蔽通道与非自主访问控制模型的关系;然后在设想的情景模式和传输模式下,设计了不同共享文件数目情况下的网络隐蔽通道通信协议,形成了网络隐蔽通道模型;通过实验对利用这些协议形成的隐蔽通道模型的传输性能进行了比较研究,分别探讨了它们对系统机密性造成的威胁程度;最后,总结不同协议机制下隐蔽通道模型的传输特点和可能对系统造成的威胁,对防范此类隐蔽通道具有一定意义。Network covert channel technique is a secret information leaking channel which violates the Bell-La Padula（BLP） model by avoiding the detection of mandatory access control measures,which threatens the confidentiality of high level information.The authors first discussed the relations between covert channel and non-discretionary access control model,and then formed the covert channel model by designing different protocols of covert channel model according to different number of shared files under the assumed scenario and transmitting pattern.The performances of this kind of network covert channel model led by these protocols were compared by experiments,and the extent of threat to the confidentiality they might make was discussed separately.Finally,the authors summarized the transferring characteristics of the model generated by these protocols and the menace they might bring,which made sense to the prevention of the network covert channels.

关 键 词：网络隐蔽通道模型 BLP模型 机密性 共享文件 协议性能 

分 类 号：TP393.04[自动化与计算机技术—计算机应用技术]