| 基于TCP选项域的信息隐藏算法研究 |
| |
| 引用本文： | 邹昕光,孙圣和.基于TCP选项域的信息隐藏算法研究[J].计算机工程与设计,2006,27(12):2111-2113,2145. |
| |
| 作者姓名： | 邹昕光 孙圣和 |
| |
| 作者单位： | 哈尔滨工业大学,自动控制及测试系,黑龙江,哈尔滨,150001 |
| |
| 摘 要： | 基于网络协议的信息隐藏技术的研究目的在于利用协议的规范或其实现的漏洞，在普通的网络数据包中嵌入隐藏信息。入侵检测工具Snort对TCP选项域的处理存在漏洞，RFC793对TCP选项域的一些使用限制也过于宽松。针对这些漏洞的设计了两种利用TCP选项域嵌入隐藏信息的信息隐藏算法，这些算法可以逃避Snort的检查；并分析了算法的隐蔽信道带宽，给出了算法的伪代码，并在实际环境中进行了验证。
|
| 关 键 词： | 信息隐藏 隐蔽信道 传输控制协议 |
| 文章编号： | 1000-7024（2006）12-2111-03 |
| 收稿时间： | 2005-05-31 |
| 修稿时间： | 2005-05-31 |
Research on information hiding algorithms based on TCP options |
| |
| ZOU Xin-guang,SUN Sheng-he.Research on information hiding algorithms based on TCP options[J].Computer Engineering and Design,2006,27(12):2111-2113,2145. |
| |
| Authors: | ZOU Xin-guang SUN Sheng-he |
| |
| Affiliation: | Department of Automatic Measurement and Control, Harbin Institute of Technology, Harbin 150001, China |
| |
| Abstract: | The information hiding research based on network protocol aims at useing vulnerabilities of protocol definitionand realization.The hiding data is embedded into the common TCP packets.The intrusion detection tool Snort has vulnerabilities in TCP option proceed-ing and the usage of some TCP options are not strictly defined in RFC793.Based on the vulnerabilities,two data hiding algorithms are presented by making use of TCP options.The algorithms evade the Snort's detection.The covert channels' bandwidth is studied and an algorithm's pseudo codes are given.The algorithms are tested in the real network environment. |
| |
| Keywords: | Libnet Snort |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
