Title :
Implementation of an ICMP-based covert channel for file and message transfer
Author :
Trabelsi, Zouheir ; El-Hajj, Wassim ; Hamdy, Safuat
Author_Institution :
Coll. of Inf. Technol., UAE Univ., Al Ain
fDate :
Aug. 31 2008-Sept. 3 2008
Abstract :
Covert channels exist in most communications systems and allow individuals to communicate truly undetectable. However, covert channels are rarely used due to their complexity. This article presents a novel covert channel based on record route IP header options for downloading and uploading text files and sending short messages. The presence of hidden texts and messages exchanged over the proposed covert channel will be unnoticed unless the IP header options are inspected. A tool has been implemented based on the proposed covert channel. It uses a client/server technology to offer a hidden version of the well known file transfer protocol (FTP) service. This service is called hidden file transfer protocol (HFTP). In addition, the tool offers a hidden SMS service (HSMS) allowing to send hidden short messages.
Keywords :
IP networks; data encapsulation; electronic messaging; message passing; steganography; ICMP-based covert channel; client/server technology; file transfer protocol service; hidden SMS service; hidden file transfer protocol; message transfer; record route IP header; short messages; text files; Cryptography; Educational institutions; File servers; Information technology; Internet; Local area networks; Protocols; Steganography; TCPIP; Timing; Covert channel; Hidden File Transfer Protocol (HFTP); Hidden SMS (HSMS); record route IP header option;
Conference_Titel :
Electronics, Circuits and Systems, 2008. ICECS 2008. 15th IEEE International Conference on
Conference_Location :
St. Julien´s
Print_ISBN :
978-1-4244-2181-7
Electronic_ISBN :
978-1-4244-2182-4
DOI :
10.1109/ICECS.2008.4674998
