Sciweavers

Share
ICC
2009
IEEE

CLACK: A Network Covert Channel Based on Partial Acknowledgment Encoding

9 years 2 days ago
CLACK: A Network Covert Channel Based on Partial Acknowledgment Encoding
—The ability of setting up a covert channel, which allows any two nodes with Internet connections to engage in secretive communication, clearly causes a very serious security concern. A number of recent studies have indeed shown that setting up such covert channels is possible by exploiting the protocol fields in the IP, TCP, or application layer. However, the quality of these covert channels is susceptible to unpredictable network condition and active wardens. In this paper, we propose CLACK, a new covert channel which encodes covert messages into the TCP acknowledgments (ACKs). Since the message encoding is performed in a TCP data channel, CLACK is reliable and resilience to adverse network conditions. Moreover, CLACK is very difficult to detect in practice, because the TCK ACKs encoded by CLACK cannot be easily distinguished from the normal ACKs. We have implemented and tested CLACK in a test-bed to validate its correctness.
Xiapu Luo, Edmond W. W. Chan, Rocky K. C. Chang
Added 21 May 2010
Updated 21 May 2010
Type Conference
Year 2009
Where ICC
Authors Xiapu Luo, Edmond W. W. Chan, Rocky K. C. Chang
Comments (0)
books