【摘要】 在研究隐蔽通道的检测方法时,可以将隐蔽通道分成两大类:单一隐蔽通道和复合隐蔽通道。复合隐蔽通道具有了跨越多主机的特点,简单的主机入侵检测体系结构很难对此进行检测,而数据融合技术可以有效地解决这个问题。文中提出了基于数据融合思想的链路分析法,并对复合隐蔽通道的特点、链路分析法检测复合隐蔽通道的理论以及软件的设计进行描述。更多还原

【Abstract】 The covert channel can be divided into two types: simple covert channel and complex covert channel.The complex covert channel has the character that communicates cross over several hosts.The simple detecting method based on host does not work very well on this.Now the data fusion technology can solve the problem.The chain analysis methodology was issued based on the data fusion technology.The character of complex covert channel,the chain analysis methodology and the design of the software were described.更多还原