基于HTTP请求行为的组合式隐蔽信道的构造研究

摘要

To achieve a proper balance in capacity,reliability and undetectability of the covert channel better,we proposed an HTTP request behaviour-based covert channel.We dynamically assigned the HTTP requests onto multiple HTTP flows and transmitted the hidden information using a way of mathematics combination.Furthermore,by simulating normal HTTP flows we made the undetectability performance of the channel be greatly enhanced.At the same time,the reliable transmission of TCP protocol ensures the transmission process not to be affected by the influence of network status,which guarantees the robustness of the channel.At last we proved through experimental result that the new covert channel has high availability,and is superior to the traditional HTTP-based covert channels on the aspects of transmission rate, transmission accuracy and undetectability.%为了更好地使隐蔽信道在容量、可靠性、抗检测性方面取得一个合适的平衡，提出一种基于 HTTP 请求行为的隐蔽信道HRCC（Combined Covert Channel Based on HTTP Requests）。将 HTTP 请求动态分配在多个 HTTP 流上，利用数学组合的方式传输隐蔽信息，且通过模拟正常的 HTTP 流使得信道的抗检测性大大增强。同时 TCP 协议的可靠传输使得传输过程不会受到网络状况的影响，从而保证了信道的鲁棒性。最后通过实验结果证明了该新型隐蔽信道具有很强的实用性，而且在传输速率、传输正确率和抗检测性方面均优于传统基于 HTTP 的隐蔽信道。