loading...
 This Article 
   
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
The IEEE Conference on Local Computer Networks 30th Anniversary (LCN'05)l
Network Based Detection of Passive Covert Channels in TCP/IP
Sydney, Australia
November 15-November 17
ISBN: 0-7695-2421-4
ASCII Text
x 
 
Eugene Tumoian, Maxim Anikeev, "Network Based Detection of Passive Covert Channels in TCP/IP," Local Computer Networks, Annual IEEE Conference on, pp. 802-809, The IEEE Conference on Local Computer Networks 30th Anniversary (LCN'05)l, 2005.
 
 
BibTex
x
 
@article{ 10.1109/LCN.2005.92,
author = {Eugene Tumoian and Maxim Anikeev},
title = {Network Based Detection of Passive Covert Channels in TCP/IP},
journal ={Local Computer Networks, Annual IEEE Conference on},
volume = {0},
year = {2005},
issn = {0742-1303},
pages = {802-809},
doi = {http://doi.ieeecomputersociety.org/10.1109/LCN.2005.92},
publisher = {IEEE Computer Society},
address = {Los Alamitos, CA, USA},
}
 
 
RefWorks Procite/RefMan/Endnote
x 
 
TY - CONF
JO - Local Computer Networks, Annual IEEE Conference on
TI - Network Based Detection of Passive Covert Channels in TCP/IP
SN - 0742-1303
SP802
EP809
A1 - Eugene Tumoian,
A1 - Maxim Anikeev,
PY - 2005
KW - null
VL - 0
JA - Local Computer Networks, Annual IEEE Conference on
ER -
 
Eugene Tumoian, Taganrog State University
Maxim Anikeev, Taganrog State University

A new method of covert channel detection in Initial Sequence Number (ISN) of TCP/IP is proposed in the paper. The detection is based on ISN generation model of original OS. Whenever any statistical deviations of ISN network packet from the ISN model are discovered; it is considered that this ISN packet is generated by malicious software, which tries to create a covert channel. The method was tested using experimental data generated by NUSHU covert channel creation tool, which has been developed by Joanna Rutkowska.

Citation:
Eugene Tumoian, Maxim Anikeev, "Network Based Detection of Passive Covert Channels in TCP/IP," lcn, pp.802-809, The IEEE Conference on Local Computer Networks 30th Anniversary (LCN'05)l, 2005
Usage of this product signifies your acceptance of the Terms of Use.