Detection method of time-sequence type covert channel based on neural network

A neural network and detection method technology, applied in the field of information security, can solve the problems of no analysis of abnormal data, inability to distinguish hidden channel types, poor versatility, etc.

Inactive Publication Date: 2015-07-01
SUZHOU INST FOR ADVANCED STUDY USTC
View PDF7 Cites 9 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

These detection algorithms mainly use statistical methods to analyze the characteristic differences between abnormal data and normal data, and do not analyze the inherent characteristics of abnormal

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Detection method of time-sequence type covert channel based on neural network
  • Detection method of time-sequence type covert channel based on neural network
  • Detection method of time-sequence type covert channel based on neural network

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0047] The following will clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only some of the embodiments of the present invention, rather than all the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the protection scope of the present invention.

[0048] see Figure 1-4 , the embodiment of the present invention includes:

[0049] A time-series type covert channel detection method based on neural network, the steps comprising:

[0050] ⑴ Processing

[0051] (1) Use the network packet capture tool to obtain and record the time slot data generated by known hidden channels, and obtain N pieces of data from each channel, where N is the number of training samples for each channel.

[0052] (2) Extract the time slot data in each sample by programming , and use t...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses a detection method of a time-sequence type covert channel based on a neural network. The method comprises the steps of obtaining three feature values of a time interval sequence including a variable coefficient, similarity and an entropy value according to a time interval between data packages; taking a four-dimensional feature vector consisting of the variable coefficient, the similarity, the entropy value and a channel type is a training sample of the neural network to train; detecting by the neural network to judge whether the communication channel has the convert channel and the belonged type after the neural network is astringed.

Description

technical field [0001] The invention belongs to the technical field of information security, and mainly uses a neural network to detect time-series hidden channels. Background technique [0002] Channel hiding is an information security technology emerging in recent years. It mainly uses the normal communication channel in the network to transmit secret information. Its main feature is its high concealment, and it can easily pass through firewalls, access control and other network security facilities, thus posing a great threat to network information security. [0003] Channel concealment can be divided into two types according to the way it is implemented, one is storage type covert channel, and the other is timing type covert channel. Among them, the storage-type covert channel mainly uses the redundant fields of the protocol to transmit secret information, while the sequential covert channel transmits secret information by changing the sending rate and sending time of ne...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): H04B17/30
Inventor 黄刘生肖汉周明沈瑶杨威
Owner SUZHOU INST FOR ADVANCED STUDY USTC
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products