基于MQTT协议命令分组编码的隐蔽信道研究

doi:10.19678/j.issn.1000-3428.0052521

计算机工程 ›› 2019, Vol. 45 ›› Issue (11): 138-143. doi: 10.19678/j.issn.1000-3428.0052521

基于MQTT协议命令分组编码的隐蔽信道研究

邓雨欣, 唐彰国, 张健, 李焕洲

四川师范大学网络与通信技术研究所, 成都 610101

收稿日期:2018-08-30 修回日期:2018-11-22 发布日期:2018-12-04
作者简介:邓雨欣(1994-),女,硕士研究生,主研方向为网络安全;唐彰国(通信作者),副教授、硕士;张健,副教授、博士;李焕洲,教授、博士。
基金资助:
四川省科技服务业发展专项（2018GFW0063）；四川省科技计划项目（2018RZ0077）。

Research on Covert Channels Based on Block Coding of MQTT Protocol Commands

DENG Yuxin, TANG Zhangguo, ZHANG Jian, LI Huanzhou

Institute of Network and Communication Technology, Sichuan Normal University, Chengdu 610101, China

Received:2018-08-30 Revised:2018-11-22 Published:2018-12-04

摘要/Abstract

摘要： 针对传统网络隐蔽信道的载体局限于互联网协议的问题，在研究物联网应用层消息队列遥测传输（MQTT）协议的基础上，构建一种基于MQTT协议的隐蔽信道模型，将网络隐蔽信道载体迁移到物联网协议中。结合数量和序列2个维度设计分组编码算法，将待发送信息嵌入MQTT会话过程中。实验结果表明，该隐蔽信道具有良好的抗检测性和鲁棒性，与直接编码和序列编码方式构建的隐蔽信道相比，其传输速率较高。

关键词: 隐蔽信道, 物联网安全, 消息队列遥测传输协议, 分组编码, 完整性校验

Abstract: The carrier of traditional network covert channels is limited to the Internet protocol.To address this problem,based on the research of the Message Queuing Telemetry Transmission(MQTT) protocol at the application layer of Internet of Things(IoT),this paper proposes a convert channel model based on the MQTT protocol to migrate the carrier of network covert channels to the IoT platform.A block coding algorithm is designed by combining the quantity and sequence of commands,and the information to be sent is embedded in the MQTT session process.Experimental results show that the proposed covert channel has a high sneakiness and robustness.Compared with the covert channels constructed by the direct coding and sequence coding methods,the proposed convert channel has a higher transmission rate.

Key words: covert channels, security of Internet of Things(IoT), Message Queuing Telemetry Transmission(MQTT)protocol, block coding, integrity verification

中图分类号:

TP393

邓雨欣, 唐彰国, 张健, 李焕洲. 基于MQTT协议命令分组编码的隐蔽信道研究[J]. 计算机工程, 2019, 45(11): 138-143.

DENG Yuxin, TANG Zhangguo, ZHANG Jian, LI Huanzhou. Research on Covert Channels Based on Block Coding of MQTT Protocol Commands[J]. Computer Engineering, 2019, 45(11): 138-143.

http://www.ecice06.com/CN/Y2019/V45/I11/138

图/表 11

20191118165916

20191118165919

20191118165922

20191118165924

20191118165927

20191118165930

20191118165933

20191118165935

20191118165941

20191118165946

20191118165948

参考文献

[1] ZHANG Lihua,LIU Guangjie,DAI Yuewei.Network packet length covert channel based on empirical distribution function[J].Journal of Networks,2014,9(6):1440-1446.
[2] IBM.MQ telemetry transport[EB/OL].[2018-08-05].http://msqq.org.
[3] EL-ATAWY A,DUAN Qi,AL-SHAER E.A novel class of robust covert channels using out-of-order packets[J].IEEE Transactions on Dependable and Secure Computing,2017,14(2):116-129.
[4] ALSAFFAR H,JOHNSON D.Covert channel using the IP timestamp option of an IPv4 packet[C]//Proceedings of International Conference on Electrical and Bio-medical Engineering,Clean Energy and Green Computing.[S.l.]:The Society of Digital Information and Wireless Communication,2015:48-51.
[5] MAVANI M,RAGHA L.Covert channel in IPv6 destination option extension header[C]//Proceedings of 2014 International Conference on Circuits,Systems,Communication and Information Technology Applications.Washington D.C.,USA:IEEE Press,2014:219-224.
[6] HOVHANNISYAN H,LU Kejie,WANG Jianping.A novel high-speed IP-timing covert channel:design and evaluation[C]//Proceedings of 2015 IEEE International Conference on Communications.Washington D.C.,USA:IEEE Press,2015:7198-7203.
[7] 王鹏,兰少华,张晶,等.一种基于TCP时间戳选项的时间隐蔽信道方法[J].解放军理工大学学报(自然科学版),2015,16(2):120-125.
[8] LUO Xiapu,CHAN E W W,CHANG R K C.TCP covert timing channels:design and detection[C]//Proceedings of 2008 IEEE International Conference on Dependable Systems and Networks With FTCS and DCC.Washington D.C.,USA:IEEE Press,2008:420-429.
[9] 张令通,罗森林.基于TCP协议首部的网络隐蔽通道技术研究[J].计算机工程与科学,2014,36(6):1072-1076.
[10] 钱玉文,王飞,孔建寿.复杂网络隐蔽信道的检测算法研究[J].系统仿真学报,2012,24(4):825-829.
[11] WANG Fei,HUANG Liusheng,MIAO Haibo,et al.A novel distributed covert channel in HTTP[J].Security and Communication Networks,2014,7(6):1031-1041.
[12] TOMAR N,GAUR M S.Information theft through covert channel by exploiting HTTP post method[C]//Proceedings of 2013 International Conference on Wireless and Optical Communications Networks.Washington D.C.,USA:IEEE Press,2013:1-5.
[13] 王永杰,刘京菊.基于DNS协议的隐蔽通道原理及性能分析[J].计算机工程,2014,40(7):102-105.
[14] 李顺普.基于CNN的FTP隐蔽信道检测模型[D].哈尔滨:哈尔滨工程大学,2018.
[15] AUMASSON J P,NEVES S,WILCOX-O'HEARN Z,et al.BLAKE2:simpler,smaller,fast as MD5[C]//Proceedings of International Conference on Applied Cryptography and Network Security.Berlin,Germany:Springer,2013:119-135.
[16] RAFTOPOULOS E,DIMITROPOULOS X.A quality metric for IDS signatures:in the wild the size matters[EB/OL].[2018-08-05].https://jis-eurasipjournals.springeropen.com/articles/10.1186/1687-417X-2013-7.

选择文件类型/文献管理软件名称

选择包含的内容

基于MQTT协议命令分组编码的隐蔽信道研究

Research on Covert Channels Based on Block Coding of MQTT Protocol Commands

RichHTML

PDF

可视化

被引次数

摘要/Abstract

引用本文

使用本文

图/表 11

参考文献

相关文章 8

编辑推荐

Metrics

本文评价

[1]	沈国良, 翟江涛, 戴跃伟. 基于Markov模型的HTTP参数排序隐蔽信道检测方法[J]. 计算机工程, 2020, 46(2): 154-158,169.
[2]	陆思妍,兰少华. 一种基于文件存储分布的隐蔽信道构造方法[J]. 计算机工程, 2017, 43(9): 199-204.
[3]	袁健,王涛. 基于聚类分析的网络存储隐蔽信道检测算法[J]. 计算机工程, 2015, 41(9): 168-173.
[4]	姜妮,张宇,赵志军. 基于消息队列遥测传输的推送系统[J]. 计算机工程, 2015, 41(9): 1-6.
[5]	张攀索, 李光平, 刘东峰. Nakagami-m衰落MIMO中继系统性能分析[J]. 计算机工程, 2012, 38(21): 86-88.
[6]	杨小玲, 张敏情, 刘圆, 雷雨. 基于线性分组码和湿纸码的三层信息隐藏算法[J]. 计算机工程, 2012, 38(17): 136-138,141.
[7]	李艳峰, 周婷婷, 杨颖. 空时分组编码在多入多出系统中的容量分析[J]. 计算机工程, 2011, 37(11): 129-131.
[8]	邹昕光;金海军;郝克成;孙圣和. 基于HTTP协议的参数排序通信隐藏算法[J]. 计算机工程, 2006, 32(20): 147-149.

模态框（Modal）标题

选择文件类型/文献管理软件名称

选择包含的内容

基于MQTT协议命令分组编码的隐蔽信道研究

Research on Covert Channels Based on Block Coding of MQTT Protocol Commands

RichHTML

PDF

可视化

被引次数

摘要/Abstract

引用本文

使用本文

图/表 11

参考文献

相关文章 8

编辑推荐

Metrics

本文评价