A Network Covert Channel Detecting Model Based on Traffic Analysis
WU Xinglong · Jisuanji gongcheng · 2002
As the traditional methods of abnormal information stream detecting are limited too much in function, this paper produces a model based on traffic analysis, which can detect network covert channel in another way. In the model, Poisson distribution in statistics and clustering analysis in data mining are introduced.