Asynchronous Covert Communication Using BitTorrent Trackers

Abstract : Covert channels enable communicating parties to exchange messages without being detected by an external observer. We propose a novel covert channel mechanism based on BitTorrent trackers. The proposed mechanism uses common HTTP commands, thus having the appearance of genuine web traffic and consists of communications that are both indirect and asynchronous: no messages are directly exchanged between the sender and the receiver (of covert communications) and there is a potentially considerable delay between the sender's message to the relaying party and the receiver collecting this message. We present details of the proposed scheme in which a centralized BitTorrent tracker is used for storing covert messages and evaluate its performance based on the implemented prototype. We analyze the detectability of covert communications by an adversary and show that, while the common nature of the BitTorrent traffic and the large number of clients make the detection unlikely, the low temporal correlation between the writer and the reader (the two communicating parties) further increases the detection difficulty.
Type de document :
Communication dans un congrès
International Symposium on Cyberspace Safety and Security (CSS), Aug 2014, Paris, France. 2014
Liste complète des métadonnées

Littérature citée [6 références]  Voir  Masquer  Télécharger

https://hal.inria.fr/hal-01053147
Contributeur : Mathieu Cunche <>
Soumis le : mardi 29 juillet 2014 - 16:15:04
Dernière modification le : mardi 26 août 2014 - 08:43:35
Document(s) archivé(s) le : mardi 25 novembre 2014 - 20:26:07

Fichier

Hidden_Channel_Tracker_short.p...
Fichiers produits par l'(les) auteur(s)

Identifiants

  • HAL Id : hal-01053147, version 1

Collections

Citation

Mathieu Cunche, Mohamed Ali Kaafar, Roksana Boreli. Asynchronous Covert Communication Using BitTorrent Trackers. International Symposium on Cyberspace Safety and Security (CSS), Aug 2014, Paris, France. 2014. 〈hal-01053147〉

Partager

Métriques

Consultations de
la notice

391

Téléchargements du document

135