关键词: 聚类分析, 网络隐蔽信道, 隐蔽信道检测, 网络安全, 安全检测

Abstract: The huge communication traffic and vast of communication protocol turn to be perfect medium for covert channel.As a kind of communication channel which allows a process to transfer information in a manner that violates the system’s security,the covert channel is becoming a major threat to the secure information systems.A detection algorithm of Network Covert Storage Channel based on Cluster Analysis(NCSCCA) is proposed in this paper to detect covert storage channel,which is widely existed in network.This new method can identify whether a covert storage channel is existed in the communicating,depending on cluster analysis difference between normal and abnormal communication and has a high-speed feature.What’s more,this method has the ability to detect several kinds of covert storage channel.Preliminary experiment results show that the method is real-time and accurate.

Key words: clustering analysis, network covert channel, covert channel detection, network security, security detection