本文選題：網(wǎng)絡(luò)隱信道 + 包間時(shí)延　； 參考：《南京理工大學(xué)》2014年碩士論文

【摘要】：由于網(wǎng)絡(luò)隱信道技術(shù)可被滲入計(jì)算機(jī)中的木馬或其他惡意程序使用而進(jìn)行隱蔽的數(shù)據(jù)偷取,亦可被間諜人員用于重要情報(bào)信息的數(shù)據(jù)傳輸。因此,對(duì)網(wǎng)絡(luò)隱信道的檢測(cè)是一項(xiàng)非常重要的網(wǎng)絡(luò)安全防護(hù)技術(shù),已經(jīng)引起了研究者的廣泛關(guān)注,而且取得了很多的研究成果。本文針對(duì)基于包間時(shí)延的時(shí)間式網(wǎng)絡(luò)隱信道的檢測(cè)問題開展了研究,在提出具有較小窗口和較低計(jì)算復(fù)雜度的檢測(cè)算法的基礎(chǔ)上,還對(duì)后續(xù)的隱信道參數(shù)估計(jì)問題進(jìn)行了研究,論文的主要研究工作如下： (1)對(duì)網(wǎng)絡(luò)隱信道的基本概念進(jìn)行了介紹,并對(duì)網(wǎng)絡(luò)隱信道正反向的相關(guān)技術(shù)及其進(jìn)展情況進(jìn)行了總結(jié)和歸納。 (2)介紹了包間時(shí)延隱信道的構(gòu)造原理,分析了不同強(qiáng)度下的網(wǎng)絡(luò)抖動(dòng)對(duì)包間時(shí)延隱信道的影響；詳細(xì)介紹了當(dāng)前主要的針對(duì)包間時(shí)延隱信道的檢測(cè)算法,總結(jié)了算法的特點(diǎn)并指出了存在的不足之處。 (3)基于包間時(shí)延隱信道產(chǎn)生的排序包間時(shí)延序列存在的臺(tái)階效應(yīng),在弱的網(wǎng)絡(luò)抖動(dòng)下,提出了一種基于排序包間時(shí)延序列臺(tái)階效應(yīng)的隱信道檢測(cè)算法,相比傳統(tǒng)的統(tǒng)計(jì)類方法,該方法具有較小的檢測(cè)窗口和低的計(jì)算復(fù)雜度；對(duì)較強(qiáng)網(wǎng)絡(luò)抖動(dòng)情況,提出了一種基于排序包間時(shí)延差分序列質(zhì)量和質(zhì)心位置的隱信道檢測(cè)算法,該方法使用相對(duì)低的檢測(cè)窗口,可在較弱的臺(tái)階效應(yīng)下通過判斷整體臺(tái)階效應(yīng)水平和分布實(shí)現(xiàn)較為可靠的檢測(cè)：仿真實(shí)驗(yàn)驗(yàn)證了所提兩種方法的有效性。 (4)針對(duì)包間時(shí)延隱信道的編碼位數(shù)和編碼時(shí)間窗口參數(shù)估計(jì)的問題,提出基于疊加多估計(jì)窗口小波變換系數(shù)的參數(shù)估計(jì)方法,該方法首先將跟蹤存儲(chǔ)下的包間時(shí)延分等成多份,并對(duì)每份排序數(shù)據(jù)差分后進(jìn)行二次小波變化,然后將多份小波變換后的系數(shù)進(jìn)行疊加以突出微弱的排序包間時(shí)延的臺(tái)階效應(yīng)。仿真實(shí)驗(yàn)表明,即使在較強(qiáng)的網(wǎng)絡(luò)抖動(dòng)下該方法依然可提高較為準(zhǔn)確的估計(jì)結(jié)果。 論文最后對(duì)全文進(jìn)行了總結(jié),同時(shí)指出存在的不足之處,并對(duì)未來(lái)值得研究的問題進(jìn)行了展望。
[Abstract]:Because the network hidden channel technology can be used by the Trojan horse or other malicious program which infiltrates into the computer to steal hidden data, it can also be used by the spy personnel for the data transmission of the important intelligence information. Therefore, the detection of network hidden channels is a very important network security protection technology, which has attracted extensive attention of researchers, and has made a lot of research results. In this paper, the detection of hidden channels based on inter-packet delay in time-type networks is studied. Based on the proposed detection algorithms with smaller windows and lower computational complexity, the subsequent hidden channel parameter estimation problems are also studied. The main work of this thesis is as follows: (1) the basic concept of hidden channel is introduced. This paper also summarizes the related technologies and their progress in the forward and backward direction of the network hidden channel. (2) the construction principle of the inter-packet time-delay channel is introduced, and the influence of the network jitter on the inter-packet time-delay channel under different intensity is analyzed. In this paper, the main detection algorithms for inter-packet time-delay channel are introduced in detail. The characteristics of the algorithm are summarized and the shortcomings are pointed out. In this paper, a hidden channel detection algorithm based on step effect between sorted packet delay sequences is proposed. Compared with traditional statistical methods, this method has smaller detection window and lower computational complexity. In this paper, a hidden channel detection algorithm based on the quality and centroid position of delay difference sequence between sorted packets is proposed. The method uses a relatively low detection window. A more reliable detection can be achieved by judging the level and distribution of the overall step effect under the weaker step effect. The simulation results show the effectiveness of the proposed two methods. Bit and encoding time window parameter estimation, A parameter estimation method based on the wavelet transform coefficients of superposition multi-estimation window is proposed. Firstly, the time delay between packets is divided into multiple parts, and then the second wavelet transform is carried out after the difference of each sorted data. Then the coefficients after multiple wavelet transform are superposed to highlight the step effect of weak sorting delay between packets. Simulation results show that the proposed method can improve the accurate estimation results even under strong network jitter. Finally, the paper summarizes the whole paper, points out the shortcomings, and looks forward to the problems worth studying in the future.
【學(xué)位授予單位】：南京理工大學(xué)
【學(xué)位級(jí)別】：碩士
【學(xué)位授予年份】：2014
【分類號(hào)】：TP393.08

【參考文獻(xiàn)】

相關(guān)期刊論文 前2條

1 鄒昕光;金海軍;郝克成;孫圣和;;基于HTTP協(xié)議多維隨機(jī)參數(shù)插入通信隱藏算法[J];計(jì)算機(jī)工程與應(yīng)用;2006年34期

2 劉光杰;戴躍偉;葉登攀;顧霞;王執(zhí)銓;;對(duì)一種基于IP標(biāo)識(shí)協(xié)議隱寫的分析[J];計(jì)算機(jī)工程;2007年24期

，

本文編號(hào)：2022768