Abstract:

To solve the problem that traditional co〖JP2〗vert channel detection algorithms cannot detect covert behavior channel precisely, a detection approach based on corrected entropy is proposed. The idea of detection approach is that when embedding the information into network operations of the users, the condition entropy of some features of network operations would be changed. In order to solve the problem of false alarm of the detector based on comdition entropy, the detection approach based on corrected entopy is proposed. Several experiments are done to detect several covert behavior channels to get the performance of the detection algorithm based on corrected entropy. The detection results show that the algorithm can work well in detecting several covert behavior channels and the detection rate is about 96%.