Implementation of an ICMP-based covert channel for file and message transfer

Author

Trabelsi, Zouheir ; El-Hajj, Wassim ; Hamdy, Safuat

Author_Institution

Coll. of Inf. Technol., UAE Univ., Al Ain

fYear

2008

fDate

Aug. 31 2008-Sept. 3 2008

Firstpage

894

Lastpage

897

Abstract

Covert channels exist in most communications systems and allow individuals to communicate truly undetectable. However, covert channels are rarely used due to their complexity. This article presents a novel covert channel based on record route IP header options for downloading and uploading text files and sending short messages. The presence of hidden texts and messages exchanged over the proposed covert channel will be unnoticed unless the IP header options are inspected. A tool has been implemented based on the proposed covert channel. It uses a client/server technology to offer a hidden version of the well known file transfer protocol (FTP) service. This service is called hidden file transfer protocol (HFTP). In addition, the tool offers a hidden SMS service (HSMS) allowing to send hidden short messages.

Keywords

IP networks; data encapsulation; electronic messaging; message passing; steganography; ICMP-based covert channel; client/server technology; file transfer protocol service; hidden SMS service; hidden file transfer protocol; message transfer; record route IP header; short messages; text files; Cryptography; Educational institutions; File servers; Information technology; Internet; Local area networks; Protocols; Steganography; TCPIP; Timing; Covert channel; Hidden File Transfer Protocol (HFTP); Hidden SMS (HSMS); record route IP header option;

fLanguage

English

Publisher

ieee

Conference_Titel

Electronics, Circuits and Systems, 2008. ICECS 2008. 15th IEEE International Conference on

Conference_Location

St. Julien´s

Print_ISBN

978-1-4244-2181-7

Electronic_ISBN

978-1-4244-2182-4

Type

conf

DOI

10.1109/ICECS.2008.4674998

Filename

4674998