Logo image
AMPhitryon: Efficient Small Data Compression for Low-Bandwidth Covert Channels
Conference paper

AMPhitryon: Efficient Small Data Compression for Low-Bandwidth Covert Channels

Steffen Wendzel, Sebastian Zillien and Sebastian Zander
ICT Systems Security and Privacy Protection, pp.463-477
IFIP Advances in Information and Communication Technology, Springer Nature Switzerland
41st IFIP TC 11 International Conference (Perth, Australia, 09/06/2026–11/06/2026)
2026

Abstract

Covert Channels Data Compression Information Hiding Internet Censorship Network Security Network Traffic
A plethora of known methods describe how policy-breaking transmissions can be conducted, e.g., through network censorship circumvention channels or through local covert channels. While some of these channels have very low capacities, only a few studies have been published on improving the content-compressibility for such channels. However, existing methods are either not useful for compressing small data, require to crawl third-party content (e.g., websites), or can only transfer data with small bitrates. Nevertheless, in reality typical payloads are often small (e.g., user credentials, status updates, or chat messages) and usually remain uncompressed, leaving more traces for an adversary to analyze. We introduce AMPhitryon, a novel approach to compress small payloads < < 100 B (especially 4–20 B). It can be used with existing tools to compress small payloads, while larger payloads can be compressed with arbitrary compressors. AMPhitryon employs a local dictionary that is compiled incrementally in a context-specific setting (e.g., the context could be a network flow or a chat). Our evaluation shows that AMPhitryon achieves higher compression ratios for short messages than existing techniques. It reaches the lowest (best) compressibility ratios (down to 0.30) with the smallest payloads (<20 B).

Details

Metrics

1 Record Views
Logo image