A phase-space reconstruction approach to detect covert channels in TCP/IP protocols

Document Type

Conference Proceeding

Publication Date

12-1-2010

Abstract

Covert channels via the widely used TCP/IP protocols have become a new challenge issue for network security. In this paper, we propose an effective method to detect the existence of hidden information in TCP ISNs (Initial Sequence Numbers), which are known as the most difficult covert channels to be detected. Our method uses phase space reconstruction to characterize dynamic nature of ISNs. A statistical model is then proposed. Based on this proposed model, the classification algorithm is developed to identify the existence of information hidden in ISNs. Simulation results have demonstrated that our proposed detection method outperforms the-state-of-the-art in terms of high detecting accuracy and greatly reduced computational complexity. Instead of off-line processing as the-state-of-the-art does, our new scheme can be used for on-line detection. © 2009 IEEE.

Identifier

79952510724 (Scopus)

ISBN

[9781424490783]

Publication Title

2010 IEEE International Workshop on Information Forensics and Security Wifs 2010

External Full Text Location

https://doi.org/10.1109/WIFS.2010.5711441

This document is currently not available here.

Share

COinS