Research on information hiding algorithms based on TCP options
Sheng-He Sun · Jisuanji gongcheng yu sheji · 2006
The information hiding research based on network protocol aims at useing vulnerabilities of protocol definitionand realization.The hiding data is embedded into the common TCP packets.The intrusion detection tool Snort has vulnerabilities in TCP option proceed-ing and the usage of some TCP options are not strictly defined in RFC793.Based on the vulnerabilities,two data hiding algorithms are presented by making use of TCP options.The algorithms evade the Snort's detection.The covert channels' bandwidth is studied and an algorithm's pseudo codes are given.The algorithms are tested in the real network environment.