Title :
Predictable Three-Parameter Design of Network Covert Communication Systems
Author :
Smith, Ronald W. ; Knight, Scott G.
Author_Institution :
Comput. Security Lab. of Electr. & Comput. Eng., R. Mil. Coll. of Canada, Kingston, ON, Canada
fDate :
3/1/2011 12:00:00 AM
Abstract :
This paper presents a predictable and quantifiable approach to designing a covert communication system capable of effectively exploiting covert channels found in the various layers of network protocols. Three metrics are developed that characterize the overall system. A measure of probability of detection is derived using statistical inference techniques. A system efficiency measure is developed based upon the noiseless capacity of the covert channel. A measure of reliability is developed as the bit-error rate of the combined noisy channel and an appropriate error-correcting code. To support reliable communication, a family of error-correcting codes are developed that handle the high symbol insertion rates found in these covert channels. The system metrics are each shown to be a function of the covert channel signal-to-noise ratio, and as such can be used to perform system level design trade-offs. Validation of the system design methodology is provided by means of an experiment using real network traffic data.
Keywords :
computer network security; error correction codes; error statistics; reliability; telecommunication network topology; telecommunication traffic; bit error rate; covert channel; covert channel signal-to-noise ratio; covert communication system; detection probability; error correcting code; high symbol insertion rates; network protocols; noiseless capacity; predictable three parameter network design; real network traffic data; reliability measure; reliable communication; statistical inference techniques; system design methodology; system efficiency measure; Detectability; efficiency; network covert channels; reliability; symbol insertion error-correcting codes;
Journal_Title :
Information Forensics and Security, IEEE Transactions on
DOI :
10.1109/TIFS.2010.2094187