Study on the detection algorithm of covert network behavior channel based on corrected entropy
Hao Jin-song · Systems engineering and electronics · 2013
To solve the problem that traditional covert channel detection algorithms cannot detect covert beha-vior channel precisely,a detection approach based on corrected entropy is proposed.The idea of detection approach is that when embedding the information into network operations of the users,the condition entropy of some features of network operations would be changed.In order to solve the problem of false alarm of the detector based on comdition entropy,the detection approach based on corrected entopy is proposed.Several experiments are done to detect several covert behavior channels to get the performance of the detection algorithm based on corrected entropy.The detection results show that the algorithm can work well in detecting several covert behavior channels and the detection rate is about 96%.