• DocumentCode
    1386545
  • Title

    Predictable Three-Parameter Design of Network Covert Communication Systems

  • Author

    Smith, Ronald W. ; Knight, Scott G.

  • Author_Institution
    Comput. Security Lab. of Electr. & Comput. Eng., R. Mil. Coll. of Canada, Kingston, ON, Canada
  • Volume
    6
  • Issue
    1
  • fYear
    2011
  • fDate
    3/1/2011 12:00:00 AM
  • Firstpage
    1
  • Lastpage
    13
  • Abstract
    This paper presents a predictable and quantifiable approach to designing a covert communication system capable of effectively exploiting covert channels found in the various layers of network protocols. Three metrics are developed that characterize the overall system. A measure of probability of detection is derived using statistical inference techniques. A system efficiency measure is developed based upon the noiseless capacity of the covert channel. A measure of reliability is developed as the bit-error rate of the combined noisy channel and an appropriate error-correcting code. To support reliable communication, a family of error-correcting codes are developed that handle the high symbol insertion rates found in these covert channels. The system metrics are each shown to be a function of the covert channel signal-to-noise ratio, and as such can be used to perform system level design trade-offs. Validation of the system design methodology is provided by means of an experiment using real network traffic data.
  • Keywords
    computer network security; error correction codes; error statistics; reliability; telecommunication network topology; telecommunication traffic; bit error rate; covert channel; covert channel signal-to-noise ratio; covert communication system; detection probability; error correcting code; high symbol insertion rates; network protocols; noiseless capacity; predictable three parameter network design; real network traffic data; reliability measure; reliable communication; statistical inference techniques; system design methodology; system efficiency measure; Detectability; efficiency; network covert channels; reliability; symbol insertion error-correcting codes;
  • fLanguage
    English
  • Journal_Title
    Information Forensics and Security, IEEE Transactions on
  • Publisher
    ieee
  • ISSN
    1556-6013
  • Type

    jour

  • DOI
    10.1109/TIFS.2010.2094187
  • Filename
    5643142