| 本文已被：浏览 5907次 下载 7905次 |
码上扫一扫！ |
|
|
| 短消息指标新定义及在事务信道限制中的应用 |
|
曾海涛1,2,3, 王永吉1,4,3, 祖伟5, 蔡嘉勇2,3, 阮利1,2
|
|
1.中国科学院 软件研究所 互联网软件技术实验室,北京 100190;2.中国科学院 研究生院,北京 100049;3.中国科学院 软件研究所 基础软件国家工程中心,北京 100190;4.中国科学院 软件研究所 计算机科学国家重点实验室,北京 100190;5.哈尔滨工程大学 自动化学院,黑龙江 哈尔滨 150001
|
|
| 摘要: |
| 短消息指标可以度量隐蔽信道的短消息传输能力,是信道容量的必要补充.但指标现有定义中还存在着以下问题:消息长度参数在普通信息系统中不能定量分析;信道限制机制难以同时满足传输时间和保真度两个约束;没有包含消息的敏感度信息.针对这些问题,首先通过引入短消息传输价值的概念,给出了短消息指标的新定义.在该定义中,利用价值阈值统一表示系统对信道短消息传输能力的容忍程度,并且在所采用的价值函数中引入了消息的敏感度因素.其后,基于安全实时数据库应用场景给出了结合短消息指标和信道容量的事务隐蔽信道度量和限制机制.理论分析和模拟结果表明,基于短消息指标的新定义,系统可以对隐蔽信道威胁实施全面的度量和可调节的限制. |
| 关键词: 短消息指标 信道容量 事务隐蔽信道 安全实时数据库 |
| DOI： |
| 分类号: |
| 基金项目:Supported by the National Natural Science Foundation of China under Grant No.60673022 (国家自然科学基金); the Hundred Talents of the Chinese Academy of Sciences (中国科学院“百人计划”); the Key Technology Research and Development Program of China under Grant No.2005BA113A02 (国家科技攻关计划) |
|
| New Definition of Small Message Criterion and Its Application in Transaction Covert Channel Mitigating |
|
ZENG Hai-Tao,WANG Yong-Ji,ZU Wei,CAI Jia-Yong,RUAN Li
|
| Abstract: |
| Small Message Criterion (SMC) can measure the capability of the covert channel on transmitting small
messages and is a necessary complement to the capacity criterion. However, SMC’s present definition hasdeficiencies. The acquirement of message length proved to be hard in the common information system. Mitigatingmechanism can not simultaneously satisfy the two restrictions of message transfer time and fidelity. The criteriondoes not cover information of message’s sensitivity. At first, the value function of message is introduced torepresent the danger of small message transmission. Based on the value function, a new definition of SMC ispresented where the threat tolerance standard of system is represented by a threshold of message value. The valuefunction also takes message’s sensitivity into account. A mechanism for secure real-time database scenario, whichchannel. Theoretical analysis and experimental results show that with the proposed new SMC, the secure system canperform comprehensive measurement and adjustable mitigation to the threat of covert channel.combines SMC with the channel capacity, is presented to measure and mitigate the threat of transaction covert |
| Key words: small message criterion channel capacity transaction covert channel secure real-time database |
