摘要： HTTP协议作为目前Internet上使用最广泛的协议是用来进行隐藏通信的最佳载体之一。常用的基于HTTP协议的通信隐藏是将待隐藏信息直接嵌入HTTP数据包的包头中，往往会留下一些明显的特征。基于HTTP协议参数排序的通信隐藏算法在不增加额外的信息情况下，通过对HTTP协议某些特殊关键词的参数进行某种排序来编码隐藏信息。为了检测出重排序攻击，需要对待隐藏信息进行信息完整性检验。

关键词: 隐藏通信, 隐蔽信道, 超文本传输协议, 参数排序

Abstract: One of the best covert channels providers in TCP/IP communication hiding is hypertext transfer protocol, which is the most widely used in Internet currently. The common method of HTTP information hiding is embedding data into HTTP packets’ payload directly, which leaves some obvious signatures. On the other hand, communication hiding algorithm based on HTTP protocol parameters sorting can encode the hidden information by sorting some special key words’ parameters emergence sequence. The algorithm will not insert additional information into the packets. To detect the re-sorting attack, some information integrity scheme is necessary.

Key words: Communication hiding, Covert channel, Hypertext transfer protocol(HTTP), Parameters sorting