一种利用三次握手进行信息隐藏的方法  

A Method of Steganogrhpy by Three-Way Handshake

作　　者：胡大辉[1] 杜治国[1] 

机构地区：[1]西南大学信息管理系,重庆荣昌402460

出　　处：《西南大学学报（自然科学版）》2012年第11期132-136,共5页Journal of Southwest University(Natural Science Edition)

摘　　要：传统的网络信息隐藏主要利用TCP报文头部的冗余位和保留位,但在传输过程中易被截取和破译.TCP使用三次握手来建立连接,握手过程中产生的数据报序号是随机的,利用随机序号可以传输隐藏信息.为提高隐藏信息的安全性和减小密文被破译的风险,采用一次一密的方式加密隐藏信息.实验表明,此方法隐藏效果好,传输信息不易被破获,能穿透大多数防火墙并正常通过入侵检测系统.The traditional method for network steganogrhpy mainly makes use of the redundant bits and re served bits at the head of TCP Datagram; however, it is vulnerable to information stealing and attacks. When establishing connection, TCP conducts a three way handshake, during which a stochastic sequence number is produced. This stochastic number can be used for hidden information transmission. In order to improve the security of hidden information and reduce the risk of being deciphered, this study uses the way of one-time pad to encrypt the hidden information. The experiment results show that this method of hiding information is good in hiding information and not easy to be cracked, and can normally penetrate most fire walls and intrusion detection systems.

关 键 词：信息隐藏 三次握手 传输控制协议 防火墙 入侵检测系统 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]