Network Time Covert Channel Detection And Improved Algorithm

With the development and wide application of Internet technology , Internet brings the characteristics such as convenience, openness, interactivity and sharing which also causes increasingly serious security problem of the network..As a special performance in network communication, network Covert Channels has special covertness and it attract researchers' interests. This paper emphasized on detection of Timing and Packet Length Covert Channels and designs of Covert Timing Channels. The main research results are as follows:(1) Collate and summarize the related technologies about network Covert Channels(2) We introduce some detection algorithms of network covert timing channels based on entropy and regularity in interarrival times, and demonstrate methods of detection that are effective against covert timing channels. then we collate and analyze about them.(3) Three detection algorithms are proposed based on packet length entropy and statistical regularity for the Packet Length Covert Channels. Experimental results prove the effectiveness of the algorithm.(4) Considering normal Covert Timing Channels are not covertness enough, and are easy to be detected by some detection algorithms, we propose a new algorithm of Timing Covert Channels. Experimental results show that the algorithm has excellent performance.