基于IP数据包传输间隔时间变化通信的IP时间隐通道具有较好的隐蔽性,但它易受数据包有界网络抖动的干扰。针对网络中的有界抖动降低IP时间隐通道鲁棒性的问题,提出了一种有界网络抖动与IP时间隐通道通信鲁棒性关系的数学模型。该模型假设通道中的每次抖动均在有界范围内符合均匀分布,以概率统计为理论基础,建立了IP时间隐通道中数据包时间间隔与数据包传输抖动范围的函数关系,能够用于评估有界网络抖动对于时间隐通道鲁棒性的影响。实验结果表明,利用这种数学模型,在有界网络抖动环境中能够实现0误码率的传输。
Time interval based IP covert timing channels are stealthier but susceptible to bounded network jitter. To solve the problem that bounded jitter from network could reduce the robustness of the IP covert timing channel,this paper proposed a mathematical model between the bounded jitter from the network and the IP covert timing channel. Under the condition that each jitter in the channel was uniformly distributed within the range bounded,the model established a function of packet transmission jitter range and the time interval between packets based on the theory of probability statistics,and it could be used to evaluate the impact of bounded jitter on the robustness of timing covert channel. The experimental results show that the IP covert timing channel can achieve a transmission bit error rate of 0 with the propose mathematical model.