Title :
Detection of Insertional Covert Channels Using Chi-square Test
Author :
Zhiyong, Cai ; Ying, Shen ; Changxiang, Shen
Author_Institution :
Coll. of Comput. Sci., Zhejiang Univ., Hangzhou, China
Abstract :
Network covert channels can be used to transfer secret information in network protocols. For a kind of network covert channels hidden in overt sources with fixed probability distribution, we propose a modified Pearson chi-square test which improves detection accuracy. We incorporated adjacent probability values and divided the new distribution into two partitions sensitive to different hidden sections. In addition, given an overt source and different covert parameters, we can calculate the relation between covert capacity and detection probability. Advantages of the detection method are verified by an experiment using real network traffic data.
Keywords :
channel capacity; channel estimation; protocols; statistical distributions; telecommunication security; telecommunication traffic; Pearson chi-square test; covert capacity; insertional covert channels detection; network covert channels; network protocols; network traffic data; probability distribution; transfer secret information; Computer science; Computer security; Counting circuits; Cryptography; Educational institutions; Information security; Layout; Probability distribution; Protocols; Testing; component; formatting; insert; style; styling;
Conference_Titel :
Multimedia Information Networking and Security, 2009. MINES '09. International Conference on
Conference_Location :
Hubei
Print_ISBN :
978-0-7695-3843-3
Electronic_ISBN :
978-1-4244-5068-8
DOI :
10.1109/MINES.2009.296