摘要： 为扩展和丰富协议隐写的载体，研究使用IP报头选项进行信息隐藏的可能性。通过对协议规范的分析，发现对选项指针字段的改写可以在选项字段中形成4种新的隐蔽通道。讨论这些隐蔽通道的原理，在模拟真实互联网的环境下实现防止路由器改写的IP选项通道，并结合网络隐蔽通道检测技术研究的最新进展分析对抗隐写分析应采取的措施。
关键词:
信息隐藏,
协议隐写,
IP报头选项,
网络隐蔽通道
Abstract: In order to extend and diversify the carrier of protocol steganography, the possibility of concealing messages in IP option is studied. After analyzing the standard of network protocol, four new covert channels can be established in IP header through rewriting of option’s pointer field. The principles of covert channels are discussed and channels which can avoid router to overwrite are implemented at Internet circumstance by simulation. The countermeasure to steganalysis which should be taken is analyzed with newest development of network covert channel’s detection.
Key words:
information hiding,
protocol steganography,
IP header option,
network covert channel
中图分类号:
杨智丹;刘克胜;王 康;汪松鹤. 基于IP报头选项的网络隐蔽通道技术[J]. 计算机工程, 2009, 35(13): 125-127.
YANG Zhi-dan; LIU Ke-sheng; WANG Kang; WANG Song-he. Network Covert Channel Technique Based on IP Header Option[J]. Computer Engineering, 2009, 35(13): 125-127.