Detection of Insertional Covert Channels Using Chi-square Test

Author

Zhiyong, Cai ; Ying, Shen ; Changxiang, Shen

Author_Institution

Coll. of Comput. Sci., Zhejiang Univ., Hangzhou, China

Volume

1

fYear

2009

fDate

18-20 Nov. 2009

Firstpage

432

Lastpage

435

Abstract

Network covert channels can be used to transfer secret information in network protocols. For a kind of network covert channels hidden in overt sources with fixed probability distribution, we propose a modified Pearson chi-square test which improves detection accuracy. We incorporated adjacent probability values and divided the new distribution into two partitions sensitive to different hidden sections. In addition, given an overt source and different covert parameters, we can calculate the relation between covert capacity and detection probability. Advantages of the detection method are verified by an experiment using real network traffic data.

Keywords

channel capacity; channel estimation; protocols; statistical distributions; telecommunication security; telecommunication traffic; Pearson chi-square test; covert capacity; insertional covert channels detection; network covert channels; network protocols; network traffic data; probability distribution; transfer secret information; Computer science; Computer security; Counting circuits; Cryptography; Educational institutions; Information security; Layout; Probability distribution; Protocols; Testing; component; formatting; insert; style; styling;

fLanguage

English

Publisher

ieee

Conference_Titel

Multimedia Information Networking and Security, 2009. MINES '09. International Conference on

Conference_Location

Hubei

Print_ISBN

978-0-7695-3843-3

Electronic_ISBN

978-1-4244-5068-8

Type

conf

DOI

10.1109/MINES.2009.296

Filename

5371025