Detection of Insertional Covert Channels Using Chi-square Test
Network covert channels can be used to transfer secret information in network protocols. For a kind of network covert channels hidden in overt sources with fixed probability distribution, we propose a modified Pearson chi-square test which improves detection accuracy. We incorporated adjacent probability values and divided the new distribution into two partitions sensitive to different hidden sections. In addition, given an overt source and different covert parameters, we can calculate the relation between covert capacity and detection probability. Advantages of the detection method are verified by an experiment using real network traffic data.
component formatting style styling insert (key words)
Cai Zhiyong Shen Ying Shen Changxiang
College of Computer Science Zhejiang University Hang Zhou, China College of Computer Science Beijing University of Technology Bei Jing, China
国际会议
武汉
英文
432-435
2009-11-18（万方平台首次上网日期，不代表论文的发表时间）