%0 Conference Proceedings
%T Systematic Engineering of Control Protocols for Covert Channels
%+ University of Hagen [Allemagne]
%A Wendzel, Steffen
%A Keller, Jörg
%Z Part 2: Work in Progress
%< avec comité de lecture
%( Lecture Notes in Computer Science
%B 13th International Conference on Communications and Multimedia Security (CMS)
%C Canterbury, United Kingdom
%Y Bart Decker
%Y David W. Chadwick
%I Springer
%3 Communications and Multimedia Security
%V LNCS-7394
%P 131-144
%8 2012-09-03
%D 2012
%R 10.1007/978-3-642-32805-3_11
%K Network Covert Channel
%K Covert Channel Control Protocol
%Z Computer Science [cs]
%Z Computer Science [cs]/Networking and Internet Architecture [cs.NI]Conference papers
%X Within the last years, new techniques for network covert channels arose, such as covert channel overlay networking, protocol switching covert channels, and adaptive covert channels. These techniques have in common that they rely on covert channel-internal control protocols (so called micro protocols) placed within the hidden bits of a covert channel’s payload. An adaptable approach for the engineering of such micro protocols is not available. This paper introduces a protocol engineering technique for micro protocols. We present a two-layer system comprising six steps to create a micro protocol design. The approach tries to combine different goals: (1) simplicity, (2) ensuring a standard-conform behaviour of the underlying protocol if the micro protocol is used within a binary protocol header, as well as we provide an optimization technique to (3) raise as little attention as possible. We apply a context-free and regular grammar to analyze the micro protocol’s behavior within the context of the underlying network protocol.
%G English
%Z TC 6
%Z TC 11
%2 https://inria.hal.science/hal-01540898/document
%2 https://inria.hal.science/hal-01540898/file/978-3-642-32805-3_11_Chapter.pdf
%L hal-01540898
%U https://inria.hal.science/hal-01540898
%~ IFIP-LNCS
%~ IFIP
%~ IFIP-TC
%~ IFIP-TC11
%~ IFIP-TC6
%~ IFIP-CMS
%~ IFIP-LNCS-7394