基于网络协议的信息隐藏研究与实现

发布时间：2018-05-13 15:59

本文选题：网络协议 + 信息隐藏　；参考：《南京邮电大学》2015年硕士论文

【摘要】：随着互联网的快速发展和信息化程度的不断提高,保障信息安全的重要性日益凸显,加强对互联网中各类信息的管理应引起高度重视。传统的安全管理系统主要是以预防、应急管理为主,已经不能满足以云计算、互联网和大数据为新特征的信息安全产业发展的需要。因此,为了沿顺新的趋势,有必要运用信息隐藏方法保障中国信息安全产业蓬勃发展。近年来出现的信息隐藏技术不仅弥补了加密技术的不足,而且信息经过加密后再隐藏传输更是提高了信息的安全性。相对于文本、图像、音频、视频等传统载体,以网络协议为载体的信息隐藏方法具有以下一些优点:第一,大量的网络协议数据包为隐蔽传输提供了丰富的载体和充足的带宽;第二,基于网络协议的信息隐藏具有双向性;第三,基于网络协议隐藏的信息不易被篡改,且容易抵御安全系统的检测。本文基于网络协议提出了两种信息隐藏方法:一种是利用ARP和TCP协议以及以太网泄漏弱点进行填充隐写的信息隐藏方法。因为存在以太网泄漏问题,有时填充操作会有错误,该设置为0的比特位没有被设置,所以可以利用这个漏洞进行填充隐写。它可以保证TCP/IP协议模型中两种或多种协议之间的通信安全。基于填充隐写系统的实验结果得出平均隐写带宽粗略估计为32比特每秒。相比其它隐写方法,填充隐写得到了一个很乐观的隐写带宽。另一种是基于IP电话语音流的转码信息隐藏方法,转码隐写的主要创新点是对于选定的语音流,找到一个公开编码器生成具有语音质量但会比原选定的语音有效负载更小的语音流,然后通过隐蔽编解码器进行语音流转码操作,剩余的有效载荷域空间用来隐藏秘密消息。并且转码信息隐藏方法得到的32千比特每秒的隐藏容量是IP语音环境中的最高隐藏容量。
[Abstract]:With the rapid development of the Internet and the continuous improvement of the degree of information, the importance of ensuring information security has become increasingly prominent, and strengthening the management of all kinds of information in the Internet should be highly valued. The traditional security management system is mainly based on prevention and emergency management, which can not meet the needs of the development of information security industry with cloud computing, Internet and big data as the new characteristics. Therefore, in order to follow the new trend, it is necessary to use the method of information hiding to ensure the vigorous development of China's information security industry. In recent years, information hiding technology not only makes up for the shortage of encryption technology, but also improves the security of information after encryption and transmission. Compared with the traditional carriers such as text, image, audio and video, the information hiding method based on network protocol has the following advantages: first, a large number of network protocol packets provide a rich carrier and sufficient bandwidth for covert transmission; Secondly, the information hiding based on network protocol is bidirectional; third, the information hidden based on network protocol is not easily tampered with, and it is easy to resist the detection of security system. This paper proposes two information hiding methods based on network protocol: one is to populate steganography with ARP and TCP protocols and Ethernet leak weakness. Because there is an Ethernet leak problem, sometimes there is an error in the padding operation, the bit set to0 is not set, so this vulnerability can be exploited to populate steganography. It can guarantee the security of communication between two or more protocols in TCP/IP protocol model. Based on the experimental results of the steganography system, the average steganography bandwidth is roughly estimated to be 32 bits per second. Compared with other steganography methods, stuffing steganography can achieve a very optimistic steganography bandwidth. The other is the information hiding method of transcoding based on IP phone voice stream. The main innovation of transcoding steganography is to select the voice stream. A public encoder is found to generate a speech stream with speech quality but smaller than the original selected speech payload, and then the covert codec is used to perform the speech flow code operation, and the remaining payload domain space is used to hide the secret message. And the hiding capacity of 32 kilobits per second obtained by transcoding information hiding method is the highest hiding capacity in IP voice environment.
【学位授予单位】：南京邮电大学
【学位级别】：硕士
【学位授予年份】：2015
【分类号】：TP393.08

【相似文献】