The Study, Based On Density Clustering Time Network The Hidden Channel Design And Testing Technology

With the development of network technology, in our work, life and learning, the network brings more and more convenience along with the related security issues. Once those datum related to the national security, corporation secrets and personal privacy are leaked, it will cause very serious consequences. Network covert channel is a technology to transmit covert messages via network redundancy. As its stealthiness may bring potential threats, the studies on detecting network covert channel have attracted more and more attentions from researchers.Compared with traditional covert storage channels, covert timing channel, which transmits covert messages by using packets'timing, is much stealthier. So the reliable detection against it becomes more difficult. This dissertation emphasizes on the detection of covert timing channel based on the density clustering. The main work and results are listed as follows.1. The data generator used to produce the traffic of five main covert timing channels is designed and achieved. The five covert timing channels are all reported in the open literatures, they are IPTCT, Jitterbug, TRCTC, HTTP-DM and TCPScript.2. To take advantage of legal datum's density clustering characteristic, a new method based on the density clustering is designed, which is verified to have better performance than the existing ones.3. Base on the existing covert timing channel detection algorithm, s-similarity and corrected conditional entropy, five typical covert timing channel algorithms and covert timing channel algorithm based on the density clustering are analyzed and the shortage of existing detection algorithms are pointed out..4. A new covert timing channel detection algorithm based on density clustering is proposed. The time intervals during legal data' transmission are modeled by the density clustering method. And, the covert timing channels are detected by comparing the model of legal datum and that of the covert ones. Experiments are performed to verify the effectiveness of the proposed algorithm.At last, the whole thesis is summarized, the shortage of existing researches is exhibited, and future research directions are prospected.