A novel covert channel based on the IP header record route option

Author: Trabelsi Zouheir   El-Sayed Hesham   Frikha Lilia   Rabie Tamer  

Publisher: Inderscience Publishers

ISSN: 1462-4613

Source: International Journal of Advanced Media and Communication, Vol.1, Iss.4, 2007-08, pp. : 328-350

Disclaimer: Any content in publications that violate the sovereignty, the constitution or regulations of the PRC is not accepted or approved by CNPIEC.

Previous Menu Next

Abstract

In this paper we propose a novel covert channel for exchanging secret information, based on the IP header record route options. Instead of encrypting a secret message or embedding it into a multimedia object, as in traditional steganography, we process the entire message and generate several IP packets with different types to carry the secret information. Thereby we foil an eavesdropper who is primarily applying statistical tests to detect encrypted channels. We show that our approach provides more protection against steganalysis and sniffing attacks, and gives a covert channel capacity which is an order of magnitude higher than traditional methods.