arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 1104.3333cs.CR
收藏

在流控制传输协议中隐藏信息

Hiding Information in a Stream Control Transmission Protocol

Wojciech Fraczek, Wojciech Mazurczyk, Krzysztof Szczypiorski

摘要:

STCP(流控制传输协议)是新的传输层协议的候选者,其可以在未来的IP网络中取代TCP(传输控制协议)和UDP(用户数据报协议)协议。目前,SCTP在许多流行的操作系统(Windows、BSD、Linux、HPUX或Sun Solaris)中实现,或者可以添加到这些操作系统中。本文确定并提出了所有可能的“地方”,隐藏的信息可以使用SCTP交换。本文主要集中在提出新的隐写方法,可以应用到SCTP,并可以利用新的,特性SCTP功能,如多归属和多流。此外,对于每种方法,都涵盖了对策。当恶意使用时,方法可能会对网络安全构成威胁。关于潜在SCTP隐写方法的知识可以用作RFC 5062的补充,RFC 5062描述了SCTP协议中的安全攻击。本文对SCTP中的信息隐藏技术进行了全面的分析,为开发隐写分析(检测)工具提供了“指导”。

英文摘要:

The STCP (Stream Control Transmission Protocol) is a candidate for a new transport layer protocol that may replace the TCP (Transmission Control Protocol) and the UDP (User Datagram Protocol) protocols in future IP networks. Currently, the SCTP is implemented in, or can be added to, many popular operating systems (Windows, BSD, Linux, HPUX or Sun Solaris). This paper identifies and presents all possible "places" where hidden information can be exchanged using an SCTP. The paper focuses mostly on proposing new steganographic methods that can be applied to an SCTP and that can utilise new, characteristic SCTP features, such as multi-homing and multi-streaming. Moreover, for each method, the countermeasure is covered. When used with malicious intent, a method may pose a threat to network security. Knowledge about potential SCTP steganographic methods may be used as a supplement to RFC5062, which describes security attacks in an SCTP protocol. Presented in this paper is a complete analysis of information hiding in an SCTP, and this analysis can be treated as a "guide" when developing steganalysis (detection) tools.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑