HIDE_DHCP: Covert Communications through Network Configuration Messages

Abstract : Covert channels are a form of hidden communication that may violate the integrity of systems. Since their birth in multilevel security systems in the early 70’s they have evolved considerably, such that new solutions have appeared for computer networks mainly due to vague protocols specifications. We analyze a protocol extensively used today, the Dynamic Host Configuration Protocol (DHCP), in search of new forms of covert communication. From this analysis we observe several features that can be effectively exploited for subliminal data transmission. This results in the implementation of HIDE_DHCP, which integrates three covert channels that accommodate to different stealthiness and bandwidth requirements.
Document type :
Conference papers
Dimitris Gritzalis; Steven Furnell; Marianthi Theoharidou. 27th Information Security and Privacy Conference (SEC), Jun 2012, Heraklion, Crete, Greece. Springer, IFIP Advances in Information and Communication Technology, AICT-376, pp.162-173, 2012, Information Security and Privacy Research. 〈10.1007/978-3-642-30436-1_14〉
Liste complète des métadonnées

Cited literature [21 references]  Display  Hide  Download

https://hal.inria.fr/hal-01518255
Contributor : <>
Submitted on : Thursday, May 4, 2017 - 1:45:47 PM
Last modification on : Thursday, May 4, 2017 - 2:53:52 PM
Document(s) archivé(s) le : Saturday, August 5, 2017 - 1:08:01 PM

File

978-3-642-30436-1_14_Chapter.p...
Files produced by the author(s)

Licence


Distributed under a Creative Commons Attribution 4.0 International License

Identifiers

Citation

Ruben Rios, Jose Onieva, Javier Lopez. HIDE_DHCP: Covert Communications through Network Configuration Messages. Dimitris Gritzalis; Steven Furnell; Marianthi Theoharidou. 27th Information Security and Privacy Conference (SEC), Jun 2012, Heraklion, Crete, Greece. Springer, IFIP Advances in Information and Communication Technology, AICT-376, pp.162-173, 2012, Information Security and Privacy Research. 〈10.1007/978-3-642-30436-1_14〉. 〈hal-01518255〉

Share

Metrics

Record views

87

Files downloads

26