Information flow analysis method based on system source code searching concealed channel

Abstract

The invention provides an information flow analytic method based on the searched convert channels of system source codes, which comprises the following steps: functions in the source codes and the statements and the variables in the functions are identified by dint of lexical analyzers and scanning system source codes; the call relations of the functions are determined, statement tree fields are constructed and functional dependence gathers of each function are given according to the functions and the function call statements identified by scanners; function information flow trees are constructed and are lopped with the statements and the variables which can generate information flow and are identified by the scanners as the input for information flow analysis; the function information flow trees are traversed, and the information flow graphs of each function are output; the shared variable visibility between dependence concentration functions and the modifiability information are acquired in functional dependence gathers according to the functional dependence gathers and the information flow graphs, thus generating shared resource matrices; covert channels are searched with the shared resource matrices as the input, and the covert channel sequences in the system are output. By adopting the information flow analytic method, the search work precision of the covert channels is improved.

Description

technical field [0001] The invention belongs to the technical field of information security, and relates to a scheme for applying information flow analysis technology to a system to analyze covert channels, in particular to an information flow analysis method for searching covert channels based on system source codes. Background technique [0002] Since the issue of covert channels was raised, information security experts from all over the world, as well as scholars in computer, mathematics, communication, etc., have found through extensive research that covert channels are harmful to information security, especially in terms of information confidentiality disclosure. Searching out the hidden channels in the system is the premise and foundation of the covert channel analysis. Among many covert channel search methods, the information flow analysis method attracts more attention. [0003] The information flow analysis method is the earliest proposed covert channel search meth...

AI Technical Summary

Problems solved by technology

[0010] The purpose of the invention is to solve the problem of searching for hidden channels based on system source code

Images