A Normal-Traffic Network Covert Channel

A high bandwidth covert channel in network protocol

“…We compare proposed model with Ji [26], Ji [27], and Garling [2]. We also generate the synthetic data for study.…”

“…We have compared Ji [27] and proposed technique in different time duration and varying the W bit size 2 to 4. We have generated 5.5, 2.5 and 1 hour traffic from node 1 to 4, for both schemes; figure 4 depict the capacity graph.…”

“…To increase the packet dropping factor and creating real time router behavior, reduce the data link between 2 to 3 as compare to other data links. Figure-3 depicts the average traffic variation of normal Ji [27] and proposed model, we have just plotted a one hour network traffic sizes, where around first 1000 packets taken as references of packet length. We use synthetic data through randomly covert data bits are generated and embedded in simulation, overall normal, previous, and proposed traffic lies in similar type of variation range.…”

“…In Ji [27] introduced another packet length based covert channel technique known as Normal Traffic Network Covert Channel (NTNCC). The author takes the real time packet lengths as references and uses these references to represent covert message on both side sender and receiver.…”

“…However, all the above packet length techniques are vulnerable to detections due to abnormal network traffic, because newly generated packet sizes are far from the real network communication packet size distribution. In Ji [27] introduced another normal traffic network covert channel known as NTNCC for covert communication technique. Hence, we proposed an efficient network covert channel that could enhance the tamper resistance, will generate normal network traffic plus with large amount of covert information as compare to the above techniques.…”