Covert Timing Channel with Distribution Matching

Network covert channel is a communication fashion that uses the redundancy in network protocols to transfer information. The goal of covert channel is reliably transmit more information undetectably. In this paper, a simple covert timing channel with distribution matching is proposed. The approach processes the network traffic as fixed-length fragment and obtains the histogram of the delays, then uses the binary coding method to embed the message bits. Experimental results show that our method works well.