Covert Channel Detection Using Process Query Systems
Annarita Giani, Vincent H. Berk, George V. Cybenko · 2005
In this paper we use traffic analysis to investigate a stealthy form of data exfiltration. We present an approach to detect covert channels based on a Process Query System (PQS), a new type of information retrieval technology in which queries are expressed as process descriptions.