本文選題：網(wǎng)絡隱信道 + 包間時延　； 參考：《南京理工大學》2014年碩士論文

【摘要】：由于網(wǎng)絡隱信道技術可被滲入計算機中的木馬或其他惡意程序使用而進行隱蔽的數(shù)據(jù)偷取,亦可被間諜人員用于重要情報信息的數(shù)據(jù)傳輸。因此,對網(wǎng)絡隱信道的檢測是一項非常重要的網(wǎng)絡安全防護技術,已經引起了研究者的廣泛關注,而且取得了很多的研究成果。本文針對基于包間時延的時間式網(wǎng)絡隱信道的檢測問題開展了研究,在提出具有較小窗口和較低計算復雜度的檢測算法的基礎上,還對后續(xù)的隱信道參數(shù)估計問題進行了研究,論文的主要研究工作如下： (1)對網(wǎng)絡隱信道的基本概念進行了介紹,并對網(wǎng)絡隱信道正反向的相關技術及其進展情況進行了總結和歸納。 (2)介紹了包間時延隱信道的構造原理,分析了不同強度下的網(wǎng)絡抖動對包間時延隱信道的影響；詳細介紹了當前主要的針對包間時延隱信道的檢測算法,總結了算法的特點并指出了存在的不足之處。 (3)基于包間時延隱信道產生的排序包間時延序列存在的臺階效應,在弱的網(wǎng)絡抖動下,提出了一種基于排序包間時延序列臺階效應的隱信道檢測算法,相比傳統(tǒng)的統(tǒng)計類方法,該方法具有較小的檢測窗口和低的計算復雜度；對較強網(wǎng)絡抖動情況,提出了一種基于排序包間時延差分序列質量和質心位置的隱信道檢測算法,該方法使用相對低的檢測窗口,可在較弱的臺階效應下通過判斷整體臺階效應水平和分布實現(xiàn)較為可靠的檢測：仿真實驗驗證了所提兩種方法的有效性。 (4)針對包間時延隱信道的編碼位數(shù)和編碼時間窗口參數(shù)估計的問題,提出基于疊加多估計窗口小波變換系數(shù)的參數(shù)估計方法,該方法首先將跟蹤存儲下的包間時延分等成多份,并對每份排序數(shù)據(jù)差分后進行二次小波變化,然后將多份小波變換后的系數(shù)進行疊加以突出微弱的排序包間時延的臺階效應。仿真實驗表明,即使在較強的網(wǎng)絡抖動下該方法依然可提高較為準確的估計結果。 論文最后對全文進行了總結,同時指出存在的不足之處,并對未來值得研究的問題進行了展望。
[Abstract]:Because the network hidden channel technology can be used by the Trojan horse or other malicious program which infiltrates into the computer to steal hidden data, it can also be used by the spy personnel for the data transmission of the important intelligence information. Therefore, the detection of network hidden channels is a very important network security protection technology, which has attracted extensive attention of researchers, and has made a lot of research results. In this paper, the detection of hidden channels based on inter-packet delay in time-type networks is studied. Based on the proposed detection algorithms with smaller windows and lower computational complexity, the subsequent hidden channel parameter estimation problems are also studied. The main work of this thesis is as follows: (1) the basic concept of hidden channel is introduced. This paper also summarizes the related technologies and their progress in the forward and backward direction of the network hidden channel. (2) the construction principle of the inter-packet time-delay channel is introduced, and the influence of the network jitter on the inter-packet time-delay channel under different intensity is analyzed. In this paper, the main detection algorithms for inter-packet time-delay channel are introduced in detail. The characteristics of the algorithm are summarized and the shortcomings are pointed out. In this paper, a hidden channel detection algorithm based on step effect between sorted packet delay sequences is proposed. Compared with traditional statistical methods, this method has smaller detection window and lower computational complexity. In this paper, a hidden channel detection algorithm based on the quality and centroid position of delay difference sequence between sorted packets is proposed. The method uses a relatively low detection window. A more reliable detection can be achieved by judging the level and distribution of the overall step effect under the weaker step effect. The simulation results show the effectiveness of the proposed two methods. Bit and encoding time window parameter estimation, A parameter estimation method based on the wavelet transform coefficients of superposition multi-estimation window is proposed. Firstly, the time delay between packets is divided into multiple parts, and then the second wavelet transform is carried out after the difference of each sorted data. Then the coefficients after multiple wavelet transform are superposed to highlight the step effect of weak sorting delay between packets. Simulation results show that the proposed method can improve the accurate estimation results even under strong network jitter. Finally, the paper summarizes the whole paper, points out the shortcomings, and looks forward to the problems worth studying in the future.
【學位授予單位】：南京理工大學
【學位級別】：碩士
【學位授予年份】：2014
【分類號】：TP393.08

【參考文獻】

相關期刊論文 前2條

1 鄒昕光;金海軍;郝克成;孫圣和;;基于HTTP協(xié)議多維隨機參數(shù)插入通信隱藏算法[J];計算機工程與應用;2006年34期

2 劉光杰;戴躍偉;葉登攀;顧霞;王執(zhí)銓;;對一種基于IP標識協(xié)議隱寫的分析[J];計算機工程;2007年24期

，

本文編號：2022768