【摘要】 提出了一种基于静态分析的隐通道自动检测方法.采用完整语法与语义分析手段完成原始信息流提取,保留了局部变量导致的间接信息流,定义了库函数信息流规则以及信息流推导规则,提高了信息流收集的准确性与完整性;采用基于信息流图的带约束逆向深度优先搜索算法,实现了潜在隐通道检测,与传统共享资源矩阵法与正向遍历信息流图方法相比,该方法具有更高的检测效率;并通过语法及语义规则实现了伪隐通道的筛选,减少了误报.更多还原

【Abstract】 A method for identifing covert channels automatically based on static analysis is proposed.The method adopts typical syntax and semantic analysis technology to implement initial information flow extraction,retains indirect information flows produced by local variables and establishes information flow rules for library functions and information flow deduction,which enhanceds the accuracy and integrality of information flow collection.Based on the information flow graph,a constrained reverse depth-first traversing(DFT) algorithm is designed to iteratively detect potential covert channels,and the efficiency of covert channel detection is thus improved.Finally,syntax and semantic rules are discussed to eliminate illegal covert channels.更多还原