Towards Adaptive Covert Communication System

Yarochkin, Fedor V.; Dai, Shih-Yao; Lin, C.R.; Huang, Yennun; Kuo, Sy‐Yen

doi:10.1109/prdc.2008.26

Cited by 16 publications

(20 citation statements)

References 8 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Covert channels can utilize multiple hiding techniques simultaneously [Wendzel and Keller 2011;Yarochkin et al 2008]. For instance, one technique could modify the LSB of the IPv4 TTL while another technique modifies the IPv4 reserved flag.…”

Section: Similar Approaches To Pattern Variationmentioning

confidence: 99%

“…Moreover, the selection of patterns can be done with adaptive techniques [Yarochkin et al 2008]. Adaptive covert channels dynamically customize the use of covert channel techniques in order to bypass blocked communications [Yarochkin et al 2008] and thus provide a more reliable data transfer.…”

Section: Similar Approaches To Pattern Variationmentioning

confidence: 99%

“…Adaptive covert channels dynamically customize the use of covert channel techniques in order to bypass blocked communications [Yarochkin et al 2008] and thus provide a more reliable data transfer. In combination with micro protocols and pattern hopping, adaptive covert channels could not only switch between network protocols but between patterns in case a technique or pattern will be administratively blocked.…”

Section: Similar Approaches To Pattern Variationmentioning

confidence: 99%

See 2 more Smart Citations

Pattern-Based Survey and Categorization of Network Covert Channel Techniques

et al. 2015

View full text Add to dashboard Cite

Network covert channels are used to hide communication inside network protocols. Within the last decades, various techniques for covert channels arose. We surveyed and analyzed 109 techniques developed between 1987 and 2013 and show that these techniques can be reduced to only 11 different patterns. Moreover, the majority (69.7%) of techniques can be categorized in only four different patterns, i.e. most of the techniques we surveyed are very similar. We represent the patterns in a hierarchical catalog using a pattern language. Our pattern catalog will serve as a base for future covert channel novelty evaluation. Furthermore, we apply the concept of pattern variations to network covert channels. With pattern variations, the context of a pattern can change. For example, a channel developed for IPv4 can automatically be adapted to other network protocols. We also propose the pattern-based covert channel optimizations pattern hopping and pattern combination. Finally, we lay the foundation for pattern-based countermeasures: While many current countermeasures were developed for specific channels, a pattern-oriented approach allows to apply one countermeasure to multiple channels. Hence, future countermeasure development can focus on patterns, and the development of real-world protection against covert channels is greatly simplified.

show abstract

Section: Similar Approaches To Pattern Variationmentioning

confidence: 99%

Section: Similar Approaches To Pattern Variationmentioning

confidence: 99%

Section: Similar Approaches To Pattern Variationmentioning

confidence: 99%

See 1 more Smart Citation

Pattern-Based Survey and Categorization of Network Covert Channel Techniques

et al. 2015

View full text Add to dashboard Cite

show abstract

“…presented a simple technique for the determination of available protocols between covert channel hosts in [9], but did not focus on optimization, forwarding, protocol classification or covert channel versioning, as we do. An important point mentioned by Yarochkin et.…”

Section: Implementations Based On Micro Protocolsmentioning

confidence: 99%

“…Yet, they lack autoconfiguration and dynamic extensibility. The idea of interoperability between covert channel hosts using different network protocols was discussed in [9], where a two-phase protocol was presented which contained a so called "network environment learning phase" (NEL, where the protocols used between two covert hosts where determined), as well as a "communication phase". This paper describes a solution for the missing aspects of such covert network channels and improves on the related work: We discuss the handling of micro protocol implementations in mobile covert channels.…”

Section: Introductionmentioning

confidence: 99%

Low-Attention Forwarding for Mobile Network Covert Channels

Wendzel

Keller

2011

Communications and Multimedia Security

View full text Add to dashboard Cite

Abstract. In a real-world network, different hosts involved in covert channel communication run different covert channel software as well as different versions of such software, i.e. these systems use different network protocols for a covert channel. A program that implements a network covert channel for mobile usage thus must be capable of utilizing multiple network protocols to deal with a number of different covert networks and hosts. We present calculation methods for utilizable header areas in network protocols, calculations for channel optimization, an algorithm to minimize a covert channel's overhead traffic, as well as implementationrelated solutions for such a mobile environment. By minimizing the channel's overhead depending on the set of supported protocols between mobile hosts, we also minimize the attention raised through the channel's traffic. We also show how existing covert network channel infrastructure can be modified without replacing all existing infrastructure elements by proposing the handling of backward-compatible software versions.

show abstract

Introduction

2016

Information Hiding in Communication Networks: Fundamentals, Mechanisms, Applications, and Countermeasures

View full text Add to dashboard Cite

Towards Adaptive Covert Communication System

Cited by 16 publications

References 8 publications

Pattern-Based Survey and Categorization of Network Covert Channel Techniques

Pattern-Based Survey and Categorization of Network Covert Channel Techniques

Low-Attention Forwarding for Mobile Network Covert Channels

Introduction

Contact Info

Product

Resources

About