一种基于像素值偏移编解码技术的屏摄隐通道研究

doi:10.3969/j.issn.1671-1122.2021.04.004

信息网络安全 ›› 2021, Vol. 21 ›› Issue (4): 31-38.doi: 10.3969/j.issn.1671-1122.2021.04.004

一种基于像素值偏移编解码技术的屏摄隐通道研究

宋宇波¹^,²(), 马文豪¹^,², 胡爱群²^,³^,⁴, 王俊波²^,³^,⁴

1.东南大学网络空间安全学院,南京 211189
2.网络通信与安全紫金山实验室,南京 211189
3.东南大学信息科学与工程学院,南京 211189
4.东南大学移动通信国家重点实验室,南京 211189

收稿日期:2021-01-07 出版日期:2021-04-10 发布日期:2021-05-14
通讯作者: 宋宇波 E-mail:songyubo@seu.edu.cn
作者简介:宋宇波（1977—）,男,江苏,副教授,博士,主要研究方向为无线网络和移动通信安全、隐私数据安全、区块链安全|马文豪（1997—）,男,山东,硕士研究生,主要研究方向为移动通信安全|胡爱群（1966—）,男,江苏,教授,博士,主要研究方向为无线网络安全、物理层安全技术|王俊波（1982—）,男,江苏,副教授,博士,主要研究方向为移动通信网络与系统理论及应用、宽带无线传输理论与多址技术
基金资助:
国家自然科学基金(61601113)

A Covert Channel Communication Method Based on Pixel Offset Encoding and Decoding Technique

SONG Yubo¹^,²(), MA Wenhao¹^,², HU Aiqun²^,³^,⁴, WANG Junbo²^,³^,⁴

1. School of Cyber Science and Engineering, Southeast University, Nanjing 211189, China
2. Network Communication and Security Purple Mountain Laboratory, Nanjing 211189, China
3. School of Information Science and Engineering, Southeast University, Nanjing 211189, China
4. National Mobile Communications Research Laboratory, Southeast University, Nanjing 211189, China

Received:2021-01-07 Online:2021-04-10 Published:2021-05-14
Contact: SONG Yubo E-mail:songyubo@seu.edu.cn

摘要/Abstract

摘要：

屏摄隐通道通过摄像机拍摄显示器进行隐蔽通信。现有屏摄隐通道技术对摄像机的拍摄角度有严格要求。针对这种情况,文章提出了一种基于像素值偏移编解码技术的屏摄隐通道方法。该方法对显示图像的像素值进行偏移,把二维码（QR码）嵌入显示帧。利用人眼对于对比度、亮度相近的图像分辨能力差的特点,秘密地将显示帧发送给摄像机。在解码时提取加入的偏移量,并且使用透视还原方法,抵消不同拍摄角度的失真,还原出QR码。通过实验验证了文章方法的可行性,实验表明,该方法适合于存在拍摄角度时的图像提取和还原,各角度平均模块误码率在3%以下。

关键词: 隐通道, 屏幕摄像机通信, 气隙系统, 数据过滤, 图像处理

Abstract:

Using screen-camera covert channel, covert communication can be realized by shooting the screen. The current implementation of screen-camera covert channel requires a strictlylimited shooting angle for the camera. Given this situation, this paper introduces a screen-camera covert channel method based on pixel offset coding technique. In this method, pixel values of the display frame are offset and embed QR code into the frame.Using the poor ability of the human eye for distinguishing images with similar contrast and brightness, the frames can be sent to the camera secretly. In the decoding process, the offset is extracted, and the perspective restoration method is used to neutralize the interference caused by shooting angles and the QR codeisrestored. QR code is used as the information coding scheme, and pixel value offset coding is used as the transmission coding scheme. This combination combines the high error correction ability of QR code and the strong anti-interference ability of offset coding to realize robust transmission. In this paper, the feasibility of the method is verified by experiments, Experimental results show that this method is suitable for image extraction and restoration in the presence of shooting angle, and the average module error rate is less than 3%.

Key words: covert channels, screen-camera communication, air-gapped system, data exfiltration, image processing

中图分类号:

TP309

宋宇波, 马文豪, 胡爱群, 王俊波. 一种基于像素值偏移编解码技术的屏摄隐通道研究[J]. 信息网络安全, 2021, 21(4): 31-38.

SONG Yubo, MA Wenhao, HU Aiqun, WANG Junbo. A Covert Channel Communication Method Based on Pixel Offset Encoding and Decoding Technique[J]. Netinfo Security, 2021, 21(4): 31-38.

图/表 8

图1

图2

图3

图4

图5

表1

图6

图7

参考文献 14

[1]	KUHN M G, ANDERSON R J. Soft Tempest: Hidden Data Transmission Using Electromagnetic Emanations[C]// Springer. 2nd International Workshop on Information Hiding, April 14-17, 1998, Portland, Oregon. Berlin: Springer, 1998: 124-142.
[2]	GURI M, KEDMA G, KACHLON A, et al. AirHopper: Bridging The Air-gap Between Isolated Networks and Mobile Phones Using Radio Frequencies[C]// IEEE. 2014 9th International Conference on Malicious and Unwanted Software: The Americas (MALWARE), October 28-30, 2014, Fajardo, PR, USA. New York: IEEE, 2014: 58-67.
[3]	GURI M, KACHLON A, HASSON O, et al. GSMem: Data Exfiltration from Air-gapped Computers over GSM Frequencies[C]// USENIX ASSOC. 24th USENIX Security Symposium, August 12-14, 2015, Washington, DC, USA. Berkeley: USENIX ASSOC, 2015: 849-864.
[4]	GURI M, MONITZ M, ELOVICI Y. USBee: Air-gap Covert-channel via Electromagnetic Emission from USB[C]// Endace. 2016 14th Annual Conference on Privacy, Security and Trust (PST), December 12-14, 2016, Auckland, New Zealand. New York: IEEE, 2016: 264-268.
[5]	LEE E, KIM H, YOON J W. Various Threat Models to Circumvent Air-gapped Systems for Preventing Network Attack[C]// WISA. International Workshop on Information Security Applications, August 20-22, 2015, Jeju Island, Korea. Switzerland: Springer, 2015: 187-199.
[6]	GURI M, SOLEWICZ Y, DAIDAKULOV A, et al. Fansmitter: Acoustic Data Exfiltration from (Speakerless) Air-gapped Computers[EB/OL]. https://www.sciencedirect.com/science/article/pii/S0167404820300080?via%3Dihub, April 2020/, 2020-09-03.
[7]	GURI M, SOLEWICZ Y, DAIDAKULOV A, et al. Acoustic Data Exfiltration from Speakerless Air-gapped Computers via Covert Hard-drive Noise[C]// Ctr Cyber & InformatSecur. 22nd European Symposium on Research in Computer Security, September 11-15, 2017, Oslo, Norway. Switzerland: Springer, 2017: 98-115.
[8]	GURI M, MONITZ M, MIRSKI Y, et al. Bitwhisper: Covert Signaling Channel Between Air-gapped Computers Using Thermal Manipulations[C]// IEEE. 2015 IEEE 28th Computer Security Foundations Symposium, July 13-17, 2015, Univ Verona, Italy. New York: IEEE, 2015: 276-289.
[9]	SEPETNITSKY V, GURI M, ELOVICI Y. Exfiltration of Information from Air-gapped Machines Using Monitor's LED Indicator[C]// IEEE. 2014 IEEE Joint Intelligence and Security Informatics Conference, September 24-26, 2014, Hague, Netherlands. New York: IEEE, 2014: 264-267.
[10]	GURI M, ZADOV B, ELOVICI Y. LED-it-GO: Leaking (a lot of) Data from Air-gapped Computers via the (Small) Hard Drive LED[C]// DIMVA. International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment, July 6-7, 2017, Bonn, Germany. Switzerland: Springer, 2017: 161-184.
[11]	GURI M, ZADOV B, DAIDAKULOV A, et al. Xled: Covert Data Exfiltration from Air-gapped Networks via Switch and Router LEDs[C]// IEEE. 2018 16th Annual Conference on Privacy, Security and Trust (PST), August 28-30, 2018, Belfast, United Kingdom. New York: IEEE, 2018: 1-12.
[12]	GURI M, BYKHOVSKY D. Air-jumper: Covert Air-gap Exfiltration/Infiltration Via Security Cameras & Infrared (IR)[J]. Computers & Security, 2019,19(82):15-29.
[13]	JO K, GUPTA M, NAYAR S K. DisCo: Display-camera Communication Using Rolling Shutter Sensors[J]. ACM Transactions on Graphics (TOG), 2016,35(5):1-13.
[14]	GURI M, HASSON O, KEDMA G, et al. An Optical Covert-channel to Leak Data Through an Air-gap[C]// Endace. 14th Annual International Conference on Privacy, Security and Trust (PST), December 12-14, 2016, Auckland, New Zealand. New York: IEEE, 2016: 642-649.

	拍摄角度/°	模块错误数	模块误码率/％	可解码性
浅色背景	0	4	0.4756	是
	15	5	0.5945	是
	30	5	0.5945	是
	45	24	2.854	是
	60	2	0.2378	是
深色背景	0	3	0.3567	是
	15	6	0.7134	是
	30	5	0.5945	是
	45	21	2.497	是
	60	1	0.1189	是

一种基于像素值偏移编解码技术的屏摄隐通道研究

A Covert Channel Communication Method Based on Pixel Offset Encoding and Decoding Technique

RichHTML

PDF (PC)

可视化

摘要/Abstract

引用本文

使用本文

图/表 8

参考文献 14

相关文章 4

编辑推荐

Metrics

本文评价

[1]	. 一种单向安全隔离与信息交换机制[J]. , 2014, 14(6): 48-.
[2]	李宇飞;关钦;李豪;蔡志豪. NDIS数据过滤的实现及应用[J]. , 2013, 13(4): 0-0.
[3]	宋涛. 数字图像处理技术在视听资料证据鉴定中的应用[J]. , 2011, 11(9): 0-0.
[4]	程燕. 伪造图像司法鉴定技术研究[J]. , 2009, 9(10): 0-0.