A Covert Channel Detection Algorithm Based on TCP Markov Model

Covert channels are used for transmitting secret information, which can penetrate the existing security equipments and bring potential dangers up to the information security. So, it´s very essential to develop the correspondent detection algorithms. In the paper, the potential redundancies in TCP protocol are analyzed, and the covert channel algorithms are divided into several kinds according to TCP protocol. And then, a new covert channel detection method is proposed based on the TCP Markov model for different application scenarios. Experiments show that the proposed algorithm achieves sound detection performance.