Conference paper
An Empirical Evaluation of IP Time To Live Covert Channels
2007 15th IEEE International Conference on Networks
15th IEEE International Conference on Networks (ICON) 2007 (Adelaide, South Australia, 19/11/2007–21/11/2007)
2007
Abstract
Communication is not necessarily made secure by the use of encryption alone. The mere existence of communication is often enough to raise suspicion and trigger investigative actions. Covert channels aim to side-step this problem by hiding additional information within the 'normal' behaviour of preexisting communication streams. The huge amount of data and vast number of different protocols in the Internet make it ideal as a high-bandwidth vehicle for covert channels. Several researchers have proposed modulation techniques to encode covert information into the IP Time To Live field. In this paper we compare the different encoding techniques and also propose two new improved encoding schemes. We present a software framework developed for evaluating covert channels in network protocols. We use this software to empirically evaluate the transmission rates of the different TTL modulation techniques for real Internet traffic.
Details
- Title
- An Empirical Evaluation of IP Time To Live Covert Channels
- Authors/Creators
- S. Zander (Author/Creator)G. Armitage (Author/Creator)P. Branch (Author/Creator)
- Publication Details
- 2007 15th IEEE International Conference on Networks
- Conference
- 15th IEEE International Conference on Networks (ICON) 2007 (Adelaide, South Australia, 19/11/2007–21/11/2007)
- Identifiers
- 991005545443207891
- Murdoch Affiliation
- Murdoch University
- Language
- English
- Resource Type
- Conference paper
Metrics
119 File views/ downloads
41 Record Views