Implementation of a Covert Channel in the 802.11 Header

Frikha, Lilia; Trabelsi, Zouheir; El-Hajj, Wassim

doi:10.1109/iwcmc.2008.103

Cited by 34 publications

(19 citation statements)

References 2 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Frikha et al [18] created a steganographic system based on header modification at the MAC sublayer. The authors proposed to use independently two fields of a MAC header: Sequence Control (SC) and Initial Vector (IV) for WEP (Wired Equivalent Privacy) protected frames.…”

Section: F Implementations Of Steganographic Techniquesmentioning

confidence: 99%

“…Finally, Grabski et al [20] implemented a Wi-Fi steganalyser as a tool to passively monitor the network traffic to detect hidden communication. The system was able to recognize five scenarios based on [4] and [18], including those based on the "Duration/ID" field as well as "Retry" and "More Data".…”

Section: F Implementations Of Steganographic Techniquesmentioning

confidence: 99%

“…Some of these proposals included several algorithms ( [14] has four), but we distinguish specific algorithms only when it was necessary ([4] -first and a second methods). According to Table I, two proposals are marked as "good" ( [15] and [4] -second method), two as "bad" ([5] [7]), and eight as "ugly" ([1] [10][13] [14] [17] [18] [19] and [4] -first method). "Ugly" methods are relatively naïve and could always be detected.…”

Section: "The Moving Observer" Technique -Evaluationmentioning

confidence: 99%

See 2 more Smart Citations

“The Good, The Bad and The Ugly”: Evaluation of Wi-Fi Steganography

Szczypiorski¹,

Janicki²,

Wendzel³

2015

jcm

View full text Add to dashboard Cite

-In this paper we propose a new method for the evaluation of network steganography algorithms based on the new concept of "the moving observer". We considered three levels of undetectability named: "good", "bad", and "ugly". To illustrate this method we chose Wi-Fi steganography as a solid family of information hiding protocols. We present the state of the art in this area covering well-known hiding techniques for 802.11 networks. "The moving observer" approach could help not only in the evaluation of steganographic algorithms, but also might be a starting point for a new detection system of network steganography. The concept of a new detection system, called MoveSteg, is explained in detail.

show abstract

Section: F Implementations Of Steganographic Techniquesmentioning

confidence: 99%

Section: F Implementations Of Steganographic Techniquesmentioning

confidence: 99%

Section: "The Moving Observer" Technique -Evaluationmentioning

confidence: 99%

See 1 more Smart Citation

“The Good, The Bad and The Ugly”: Evaluation of Wi-Fi Steganography

Szczypiorski¹,

Janicki²,

Wendzel³

2015

jcm

View full text Add to dashboard Cite

show abstract

“…802.11) can also used for covert communication [52,63]. In [53] it is proposed to use the destination address field of unsolicited IEEE 802.11 acknowledgment frames as the medium for covert communication.…”

Section: Wireless Covert Channelsmentioning

confidence: 99%

Behavioral Mimicry Covert Communication

Ahmadzadeh

Agnew

2012

Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering

View full text Add to dashboard Cite

“…Furthermore, due to the unreliability of UDP, the rate switching technique used can have a large effect on UDP traffic. A simple covert storage channel at the data link layer using the 802.11 sequence and WEP initial vector fields in the header was introduced in [17].…”

Section: Chapter 2 Related Workmentioning

confidence: 99%

Covert DCF: A DCF-Based Covert Timing Channel in 802.11 Networks

Holloway¹,

Beyah

2011

2011 IEEE Eighth International Conference on Mobile Ad-Hoc and Sensor Systems

View full text Add to dashboard Cite

Covert channels are becoming more popular as security risks grow in networks. One area that is promising for covert channels is wireless networks, since many use a collision avoidance scheme such as carrier sense multiple access with collision avoidance (CSMA/CA).These schemes often introduce randomness in the network, which provides good cover for a covert timing channel. In this thesis, we use the 802.11 standard as an example to demonstrate a wireless covert channel. In particular, most 802.11 configurations use a distributed coordinated function (DCF) to assist in communications. This DCF uses a random backoff to avoid collisions, which provides the cover for our covert channel. Our timing channel provides great improvements on other recent covert channels in the field of throughput, while maintaining high accuracy. We are able to achieve throughput over 8000 bps using Covert DCF, or by accepting a throughput of 1800 bps we can achieve higher covertness and 99% accuracy as well.

show abstract

Implementation of a Covert Channel in the 802.11 Header

Cited by 34 publications

References 2 publications

“The Good, The Bad and The Ugly”: Evaluation of Wi-Fi Steganography

“The Good, The Bad and The Ugly”: Evaluation of Wi-Fi Steganography

Behavioral Mimicry Covert Communication

Covert DCF: A DCF-Based Covert Timing Channel in 802.11 Networks

Contact Info

Product

Resources

About