Systematic Engineering of Control Protocols for Covert Channels

Abstract : Within the last years, new techniques for network covert channels arose, such as covert channel overlay networking, protocol switching covert channels, and adaptive covert channels. These techniques have in common that they rely on covert channel-internal control protocols (so called micro protocols) placed within the hidden bits of a covert channel’s payload. An adaptable approach for the engineering of such micro protocols is not available. This paper introduces a protocol engineering technique for micro protocols. We present a two-layer system comprising six steps to create a micro protocol design. The approach tries to combine different goals: (1) simplicity, (2) ensuring a standard-conform behaviour of the underlying protocol if the micro protocol is used within a binary protocol header, as well as we provide an optimization technique to (3) raise as little attention as possible. We apply a context-free and regular grammar to analyze the micro protocol’s behavior within the context of the underlying network protocol.
Type de document :
Communication dans un congrès
Bart Decker; David W. Chadwick. 13th International Conference on Communications and Multimedia Security (CMS), Sep 2012, Canterbury, United Kingdom. Springer, Lecture Notes in Computer Science, LNCS-7394, pp.131-144, 2012, Communications and Multimedia Security. 〈10.1007/978-3-642-32805-3_11〉
Liste complète des métadonnées

Littérature citée [22 références]  Voir  Masquer  Télécharger

https://hal.inria.fr/hal-01540898
Contributeur : Hal Ifip <>
Soumis le : vendredi 16 juin 2017 - 16:47:07
Dernière modification le : vendredi 16 juin 2017 - 16:48:57
Document(s) archivé(s) le : mercredi 10 janvier 2018 - 13:56:13

Fichier

978-3-642-32805-3_11_Chapter.p...
Fichiers produits par l'(les) auteur(s)

Licence


Distributed under a Creative Commons Paternité 4.0 International License

Identifiants

Citation

Steffen Wendzel, Jörg Keller. Systematic Engineering of Control Protocols for Covert Channels. Bart Decker; David W. Chadwick. 13th International Conference on Communications and Multimedia Security (CMS), Sep 2012, Canterbury, United Kingdom. Springer, Lecture Notes in Computer Science, LNCS-7394, pp.131-144, 2012, Communications and Multimedia Security. 〈10.1007/978-3-642-32805-3_11〉. 〈hal-01540898〉

Partager

Métriques

Consultations de la notice

47

Téléchargements de fichiers

39