A Normal-Traffic Network Covert Channel

Abstract

Covert channels are widely used for secret information transmission on networks. Although existing packet length based covert channels have great tamper resistance, they fail to deliver normal network traffic especially when the amounts of covert messages increase. As such, they are vulnerable to detections due to abnormal network traffic. Hence, in this paper, we are motivated to design a protocol-independent normal-traffic network covert channel based on message length, which has great resistance to network traffic detections.