| 基于链路分析法的复合隐蔽通道检测 |
| |
| 引用本文： | 华元彬,蒋建春,卿斯汉.基于链路分析法的复合隐蔽通道检测[J].计算机应用,2006,26(1):81-0083. |
| |
| 作者姓名： | 华元彬 蒋建春 卿斯汉 |
| |
| 作者单位： | 1. 中国科学院,研究生院,北京,100039
2. 中国科学院软件研究所,北京,100080;中国科学院,信息安全技术工程研究中心,北京,100080 |
| |
| 摘 要： | 在研究隐蔽通道的检测方法时，可以将隐蔽通道分成两大类：单一隐蔽通道和复合隐蔽通道。复合隐蔽通道具有了跨越多主机的特点，简单的主机入侵检测体系结构很难对此进行检测，而数据融合技术可以有效地解决这个问题。文中提出了基于数据融合思想的链路分析法，并对复合隐蔽通道的特点、链路分析法检测复合隐蔽通道的理论以及软件的设计进行描述。
|
| 关 键 词： | 数据隐藏 隐蔽通道 单一隐蔽通道 复合隐蔽通道 数据融合 链路分析法 |
| 文章编号： | 1001-9081（2006）01-0081-03 |
| 收稿时间： | 2005-07-05 |
| 修稿时间： | 2005-07-052005-11-30 |
Complex covert channel detection based on chain analysis methodology |
| |
| HUA Yuan-bin,JIANG Jian-chun,QING Si-han.Complex covert channel detection based on chain analysis methodology[J].journal of Computer Applications,2006,26(1):81-0083. |
| |
| Authors: | HUA Yuan-bin JIANG Jian-chun QING Si-han |
| |
| Affiliation: | 1. School of Graduate, the Chinese Academy of Sciences, Beifing 100039, China; 2. Institute of Software, the Chinese Academy of Sciences, Belting 100080, China; Engineering Research Center for Information Security Technology, the Chinese Academy of Sciences, Beijing 100080, China |
| |
| Abstract: | The covert channel can be divided into two types: simple covert channel and complex covert channel.The complex covert channel has the character that communicates cross over several hosts.The simple detecting method based on host does not work very well on this.Now the data fusion technology can solve the problem.The chain analysis methodology was issued based on the data fusion technology.The character of complex covert channel,the chain analysis methodology and the design of the software were described. |
| |
| Keywords: | data hiding covert channel simple covert channel complex covert channel data fusion chain analysis methodology |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
| 点击此处可从《计算机应用》浏览原始摘要信息 |
|
点击此处可从《计算机应用》下载全文 |
