arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 1002.4303cs.CRcs.MM
收藏

什么是可疑的VoIP延迟?

What are suspicious VoIP delays?

Wojciech Mazurczyk, Krzysztof Cabaj, Krzysztof Szczypiorski

摘要:

IP语音(VoIP)无疑是当今IP网络中最流行的实时服务。最近的研究表明,它也是一个合适的载体信息隐藏。隐藏通信可能会引起安全问题,因为它可能导致机密信息泄露。在VoIP中,RTP(实时传输协议)特别适合于隐写目的,RTP提供了用于通过IP网络成功传输语音分组的手段。与IP电话中使用的其他协议相比,它的特点是高分组速率,从而导致潜在的高隐写带宽。RTP数据包流的修改为隐藏通信提供了许多机会,因为数据包可能被延迟、重新排序或故意丢失。在本文中,使检测隐写交换VoIP,我们研究了真实的RTP流量的痕迹来回答这个问题,什么是“正常”的RTP数据包流的延迟看起来像?以及,是否有可能检测到使用已知的RTP隐写方法的基础上,这方面的知识?

英文摘要:

Voice over IP (VoIP) is unquestionably the most popular real-time service in IP networks today. Recent studies have shown that it is also a suitable carrier for information hiding. Hidden communication may pose security concerns as it can lead to confidential information leakage. In VoIP, RTP (Real-time Transport Protocol) in particular, which provides the means for the successful transport of voice packets through IP networks, is suitable for steganographic purposes. It is characterised by a high packet rate compared to other protocols used in IP telephony, resulting in a potentially high steganographic bandwidth. The modification of an RTP packet stream provides many opportunities for hidden communication as the packets may be delayed, reordered or intentionally lost. In this paper, to enable the detection of steganographic exchanges in VoIP, we examined real RTP traffic traces to answer the questions, what do the "normal" delays in RTP packet streams look like? and, is it possible to detect the use of known RTP steganographic methods based on this knowledge?

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑