Detection of TCP covert channel based on Markov model

  title={Detection of TCP covert channel based on Markov model},
  author={Jiangtao Zhai and Guangjie Liu and Yuewei Dai},
  journal={Telecommunication Systems},
Network covert channel is a covert communication method by hiding covert messages into overt network packets. In recent years, with the development of various hiding methods, network covert channel has become a new kind of threat for network security. The covert channel that uses the redundancies existing in TCP protocol to make hiding is called TCP covert channel. In this paper, the behaviors of TCP flows are modeled by the Markov chain composed of the states of TCP packets. And the… CONTINUE READING
3 Citations
28 References
Similar Papers


Publications citing this paper.


Publications referenced by this paper.
Showing 1-10 of 28 references

Hiding in- formation in retransmissions. Computing Research Repository (CoRR)

  • W. Mazurczyk, M. Smolarczyk, K. Szczypiorsky
  • e-print archive, Ithaca: Cornell Univer- sity…
  • 2009

Similar Papers

Loading similar papers…