188宝金博页面版

ISSN 1000-9825, CODEN RUXUEW Journal of Software, Vol.21, No.9, September 2010, pp.2262−2288 doi: 10.3724/SP.J.1001.2010.03880 © by Institute of Software, the Chinese Academy of Sciences. All rights reserved. E-mail: jos@iscas.ac.cn http://www.jos.org.cn Tel/Fax: +86-10-62562563 隐蔽信道研究∗ 王永吉1,2,3+, 吴敬征1,4, 曾海涛5, 丁丽萍1, 廖晓锋1,4 1(中国科学院 软件研究所 基础软件国家工程研究中心,北京 100190) 2(中国科学院 软件研究所 互联网软件技术实验室,北京 100190) 3(中国科学院 软件研究所 计算机科学国家重点实验室,北京 100190) 4(中国科学院 研究生院,北京 100049) 5(中国移动通信研究院,北京 100053) Covert Channel Research WANG Yong-Ji1,2,3+, WU Jing-Zheng1,4, ZENG Hai-Tao5, DING Li-Ping1, LIAO Xiao-Feng1,4 1(National Engineering Research Center for Fundamental Software, Institute of Software, The Chinese Academy of Sciences, Beijing 100190, China) 2(Laboratory for Internet Software Technologies, Institute of Software, The Chinese Academy of Sciences, Beijing 100190, China) 3(State Key Laboratory of Computer Science, Institute of Software, The Chinese Academy of Sciences, Beijing 100190, China) 4(Graduate University, The Chinese Academy of Sciences, Beijing 100049, China) 5(China Mobile Research Institute, Beijing 100053, China) + Corresponding author: E-mail: ywang@itechs.iscas.ac.cn Wang YJ, Wu JZ, Zeng HT, Ding LP, Liao XF. Covert channel research. Journal of Software, 2010,21(9):2262−2288. http://www.jos.org.cn/1000-9825/3880.htm Abstract: Covert channel is the communication channel that allows a process to transfer information in a manner that violates the system’s security policy. It is a major threat to the secure information systems and widely exists in secure operation systems, secure networks and secure database. Covert channel analysis is generally required by secure information systems’s secure criterion, such as TCSEC. This paper firstly analysis the covert channel concept, field, techniques and classification. Next, it surveys the classic techniques and methods from the following aspects: covert channel identification, measurement, elimination, limitation, auditing, and detection. The research achievements in the past 30 years are systematically concluded, especially the new techniques of covert channel measurements and handlings in recent years. This paper attempts to give a comprehensive and clear outline for this research direction, and provides a useful reference for the researchers of this field. Key words: covert channel; covert channel identification; covert channel measurement; covert channel elimination; covert channel limitation; covert channel auditing; covert channel detection ∗ Supported by the National Natural Science Foundation of China under Grant No.60673022 (国家自 然科学基金); the National High-Tech Research and Development Plan of China under Grant No.2007AA010601 (国家高技术研究发展计划(863)); the Knowledge Innovation Key Directional Program of the Chinese Academy of Sciences under Grant No.KGCX2-YW-125 (中国科学院重要方向项目 ) Received 2009-07-27; Accepted 2010-05-05