Model-based Network Hidden Channel Research

With the development of internet technology, information can be transmitted more conveniently and much faster. While the network provides us with convenience, it also brings risks and hidden threatens. Cryptography was adopted to encrypt information during the early period. However, with the development of computer networks, people's desirability can not be met by using cryptography. As a result, network information hiding technology was born. Storage Covert Channel and its detection technology were studies in this paper, including the following results:(1) The related technologies about network storage Covert Channel was summarized. Analysis of the covert channel based on the TCP/IP header especially.(2) Present a covert channel based on retransmission, and experimental results prove the effectiveness of this algorithm. But the potential hazards still exist. An expiation algorithm solving the problem which was caused by the RSTEG was proposed in this article. According to the expiation algorithm, the checksum of the for-and-aft packets will be equal.(3) Firstly, two covert channel based on IPID were implemented. Then the normal model of the IPID was designed after summarizing the normal IPID in different networks. Secondly, a detection algorithm was formed based on variance. Experimental results prove the effectiveness of this detection algorithm.(4) A new algorithm of covert channel was designed based on IPID and the experimental results show that the algorithm has excellent performance.(5) Proposes a method which using the Support Vector Machine to detect the Covert channel based on TCP/IP header. And the results show the validity of the method. At the end, we conclude the main research of this paper and perspective study in this area.