Covert Channel For Local Area Network
There exist many TCP/IP covert channels in WAN for network hidden communication in last decades. However, there are few covert channels designed for the LAN while existing WAN covert channels could not be adapted for the LAN applications. In this paper we proposed a novel covert channel based on ARP broadcasting packets for LAN. In our method we employed the normal ARP request packets as the carrier which could escape feature-based detections. In addition, our method would not lead to abnormal network traffic. Experimental results show that our covert channel has great resistance to not only the feature-based detections but also the network traffic detections.
Hidden communication LAN covert channels ARP broadcasting packet Undetectability.
Liping Ji Yu Fan Chuan Ma
Information Security Center, Harbin Institute of Technology Shenzhen Graduate School, Shenzhen, P. R. China, 518055
国际会议
北京
英文
1-4
2010-06-25（万方平台首次上网日期，不代表论文的发表时间）