Building Covert Channels over the Packet Reordering Phenomenon

Abstract—New modes of communication have shown themselves to be needed for more secure and private types of data. Steganography or data-hiding through covert channels can be highly motivated by today’s security requirements and various needs of applications. Moreover, the amount of information in the Internet traffic is not bounded by what is contained in packets payload; there is considerable hidden capacity within packets and flows characteristics to build robust and stealthy covert channels. In this paper, we propose using the packet reordering phenomenon as the media to carry a hidden channel. As a naturally occurring behavior of packets traveling the Internet, it can as well be induced to send a signal to the receiving end. Specific permutations are selected to enhance the reliability of the channel, while their distribution was selected to imitate real traffic and increase stealthiness. The robustness of such channel is analyzed, and its bandwidth is calculated. A simple ...

• Type: Conference
• Year: 2009
• Where: INFOCOM
• Authors: Adel El-Atawy, Ehab Al-Shaer
• Keywords: Communications, Covert Channels, INFOCOM 2009, Packet Reordering, Packet Reordering Phenomenon