泛在网络环境下隐蔽通道关键技术研究综述  

Survey on key technologies of covert channel in ubiquitous network environment

作　　者：李凤华[1,2] 李超洋 郭超 李子孚 房梁 郭云川 LI Fenghua;LI Chaoyang;GUO Chao;LI Zifu;FANG Liang;GUO Yunchuan(Institute of Information Engineering,Chinese Academy of Sciences,Beijing 100093,China;School of Cyber Security,University of Chinese Academy of Sciences,Beijing 100049,China;Department of Electronic and Communication Engineering,Beijing Electronic Science and Technology Institute,Beijing 100070,China)

机构地区：[1]中国科学院信息工程研究所,北京100093 [2]中国科学院大学网络空间安全学院,北京100049 [3]北京电子科技学院电子与通信工程系,北京100070

出　　处：《通信学报》2022年第4期186-201,共16页Journal on Communications

基　　金：国家重点研发计划基金资助项目(No.2019YFB2101702);国家自然科学基金资助项目(No.U1836203);广东省重点领域研发计划基金资助项目(No.2019BP010137005);中国科学院青年创新促进会人才基金资助项目(No.2019160)。

摘　　要：在泛在网络环境下,隐蔽通道通过修改系统共享资源,绕开系统的安全策略传输隐蔽信息,给计算机和网络系统造成了严重的安全威胁。针对此问题,主要从度量、构建和检测3个方面对泛在网络环境下的隐蔽通道相关研究进行归纳和分析。首先,总结归纳了典型的隐蔽通道度量指标,包括隐蔽通道的容量、稳健性、抗检测性、规律性和形状。其次,归纳整理了隐蔽通道的构建方法,并从共享资源、容量、稳健性、抗检测性、优点和缺点6个方面对隐蔽通道构建技术进行了对比分析。再次,从隐蔽通道类型、准确率、是否能盲检、优点和缺点5个方面对比分析了隐蔽通道的检测技术。最后,总结了隐蔽通道的发展趋势并展望了未来研究方向。In the ubiquitous network environment,covert channel bypasses the system’s security strategy to transmit covert information by modifying the system’s shared resources,which poses a serious security threat to the computer and network system.The researches on covert channel in ubiquitous network environment were summarized and analyzed from three aspects of measurement,construction and detection.First,the typical covert channel metrics including the capacity,robustness,anti-detection,regularity and shape were summarized.Second,the construction technologies of covert channel were summarized and analyzed from six aspects of resource sharing,capacity,robustness,anti-detection,advantages and disadvantages in the first time.Third,the detection technologies of covert channel were compared and analyzed from five aspects of the type of covert channel,accuracy,whether it can be blind detection,the advantages and disadvantages.Finally,the development trends of covert channel were summarized and future research directions were prospected.

关 键 词：泛在网络 隐蔽通道度量 隐蔽通道构建 隐蔽通道检测 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]