A novel covert channel based on the IP header record route option. (10th August 2007)

• Record Type: Journal Article
• Authors: Trabelsi, Zouheir; El-Sayed, Hesham; Frikha, Lilia; Rabie, Tamer
• Is Part Of: International journal of advanced media and communication. Volume 1:Number 4(2007)
• Page Start: 328
• Page End: 350
• Publication Date: 2007-08-10
• Subjects: covert channels -- hidden information -- IP header record route options -- steganalysis -- traceroute -- secret information -- eavesdropping -- secrecy -- security -- steganography -- encryption -- sniffing attacks -- surveillance -- network protocols; Multimedia communications -- Periodicals; Multimedia systems -- Periodicals; 384.38
• Languages: English
• ISSNs: 1462-4613

Abstract

In this paper we propose a novel covert channel for exchanging secret information, based on the IP header record route options. Instead of encrypting a secret message or embedding it into a multimedia object, as in traditional steganography, we process the entire message and generate several IP packets with different types to carry the secret information. Thereby we foil an eavesdropper who is primarily applying statistical tests to detect encrypted channels. We show that our approach provides more protection against steganalysis and sniffing attacks, and gives a covert channel capacity which is an order of magnitude higher than traditional methods.