The Community for Technology Leaders
RSS Icon
Subscribe
Clearwater Beach, FL, USA USA
Oct. 22, 2012 to Oct. 25, 2012
ISBN: 978-1-4673-1565-4
pp: 280-283
Steffen Wendzel , Faculty of Mathematics and Computer Science, University of Hagen, Germany
Sebastian Zander , Centre for Advanced Internet Architectures, Swinburne University of Technology, Melbourne, Australia
ABSTRACT
Network covert channels enable hidden communication and can be used to break security policies. Within the last years, new techniques for such covert channels arose, including protocol switching covert channels (PSCCs). PSCCs transfer hidden information by sending network packets with different selected network protocols. In this paper we present the first detection methods for PSCCs. We show that the number of packets between network protocol switches and the time between switches can be monitored to detect PSCCs with 98–99% accuracy for bit rates of 4 bits/second or higher.
INDEX TERMS
Protocols, Bit rate, Accuracy, Switches, Receivers, Machine learning, Network Security, Covert Channel
CITATION
Steffen Wendzel, Sebastian Zander, "Detecting protocol switching covert channels", LCN, 2012, 38th Annual IEEE Conference on Local Computer Networks, 38th Annual IEEE Conference on Local Computer Networks 2012, pp. 280-283, doi:10.1109/LCN.2012.6423628
6 ms
(Ver 2.0)

Marketing Automation Platform Marketing Automation Tool