Journal of Systems Engineering and Electronics ›› 2013, Vol. 35 ›› Issue (6): 1312-1217.doi: 10.3969/j.issn.1001-506X.2013.06.31

• 通信与网络 • 上一篇    下一篇


钱玉文1, 宋华菊2 , 赵邦信1 , 张彤芳1, 郝劲松1   

  1. 1.南京理工大学电子工程与光电技术学院, 江苏 南京 210094
     2.南京晓庄学院, 江苏 南京 210011
  • 出版日期:2013-06-15 发布日期:2010-01-03

Study on the detection algorithm of covert network behavior channel based on corrected entropy

QIAN Yu-wen1, SONG Hua-ju2, ZHAO Bang-xin1, ZHANG Tong-fang1,HAO Jin-song1

  1. 1. School of Electronic and Optical Engineering, Nanjing University of Science and Technology, Nanjing 210094,  China
    2. Nanjing Xiaozhuang University, Nanjing 210011, China
  • Online:2013-06-15 Published:2010-01-03




To solve the problem that traditional co〖JP2〗vert channel detection algorithms cannot detect covert behavior channel precisely, a detection approach based on corrected entropy is proposed. The idea of detection approach is that when embedding the information into network operations of the users, the condition entropy of some features of network operations would be changed. In order to solve the problem of false alarm of the detector based on comdition entropy, the detection approach based on corrected entopy is proposed. Several experiments are done to detect several covert behavior channels to get the performance of the detection algorithm based on corrected entropy. The detection results show that the algorithm can work well in detecting several covert behavior channels and the detection rate is about 96%.