二维IP时间隐通道的构建方法研究  

Research on Construction Method of Two-dimensional IP Covert Timing Channels

作　　者：王昌达[1] 章乐[1] 周从华[1] 

机构地区：[1]江苏大学计算机科学与通信工程学院,镇江212013

出　　处：《系统仿真学报》2013年第10期2285-2293,2299,共10页Journal of System Simulation

基　　金：国家自然科学基金(61003288);江苏省自然科学基金(BK2010192);教育部博士点基金(20093227110005);江苏省六大人才高峰项目(1631170006);江苏省高校自然科学研究计划(07KJB520016);江苏大学高级人才项目(07JDG053)

摘　　要：基于IP数据包传输间隔时间变化通信的IP时间隐通道具有较好的隐蔽性,但它易受网络延迟与时延抖动的干扰,且带宽较低。而基于数据包标识号传输顺序变化通信的IP时间隐通道,易受网络中路由选择等因素的干扰,又因为统计数据显示只有0.1%至3%的IP数据包在网络传输过程中会出现错序现象,这决定它可使用的带宽十分有限。在研究上述两类不同类型IP时间隐通道的基础上,提出二维IP时间隐通道的概念,理论分析和实验验证均表明,二维IP时间隐通道融合了两类不同IP时间隐通道的优点,具有隐蔽性高、鲁棒性好,以及相对较高的带宽。Time interval based IP covert timing channels are stealthier but susceptible to network jitter and delay, and its bandwidth is low. IP packets reordering based IP covert timing channel is susceptible to routte selecting, statistics show that only 0.1% to 3% IP packets reordering are observed in normal traffic, which decides it would not have the higher communication bandwidth. Based on the two different kinds of IP covert timing channels mentioned above, the two-dimensional IP covert timing channel, which integrated the merits of both, were proposed. Theoretical analysis and experiments illustrate that two-dimensional IP covert timing channels are stealthier, robust and possess the higher bandwidth.

关 键 词：IP时间隐通道 二维 带宽 纠错编码 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]