The problem of traffic normalization within a covert channel's network environment learning phase
|Network covert channels can build cooperating environments within overlay networks. Peers in such an overlay network can initiate connections with new peers and can build up new paths within the overlay network. To communicate with new peers, it is required to determine protocols which can be used between the peers – this process is called the “Network Environment Learning Phase” (NEL Phase). We show that the NEL phase itself as well as two similar approaches are affected by traffic normalization, which leads to a two-army problem. Solutions to overcome this not completely solvable problem are presented and analyzed. A proof of concept code was implemented to verify the approach.
|Gesellschaft für Informatik e.V.
|SICHERHEIT 2012 – Sicherheit, Schutz und Zuverlässigkeit
|Lecture Notes in Informatics (LNI) - Proceedings, Volume P-195
|The problem of traffic normalization within a covert channel's network environment learning phase
|7.-9. März 2012
|Regular Research Papers