Covert Timing Channel with Distribution Matching
Guangjie Liu, Jiangtao Zhai, Yuewei Dai, Zhiquan Wang · 2009
Network covert channel is a communication fashion that uses the redundancy in network protocols to transfer information. The goal of covert channel is reliably transmit more information undetectably. In this paper, a simple covert timing channel with distribution matching is proposed. The approach processes the network traffic as fixed-length fragment and obtains the histogram of the delays, then uses the binary coding method to embed the message bits. Experimental results show that our method works well.