一种基于信息流脉络网的隐蔽通道搜索方法

摘要

To avoid covert flow tree(CFT) method's problems,this paper proposed an improved method for detecting covert channels.The method defined a net structure offering covert information flows of systems.It presented the criterion rules to exclude legal channels from covert channels in nets,and gained the operation sequences when searching for the paths in nets.Instantial analysis shows the method can catch up on the shortage of CFT method.%针对隐蔽流树搜索方法存在的规模大、分析工作量繁重等问题,提出一种改进的隐蔽通道搜索方法.该方法采用网结构描述系统中的隐蔽信息流,提出网中隐蔽通道的判定规则；依据判定规则在深度优先搜索网中隐蔽通信路径过程中排除合法通道；结合路径中的操作序列构造隐蔽通道工作场景,从而发现系统中的隐蔽通道.实例分析和对比表明,该方法可以弥补隐蔽流树搜索方法的不足.