Français
3. The problem of a hidden channel on a network
Implementing such a channel via the TCP/IP protocol is a tricky business. Indeed, any generation of superfluous traffic is (potentially) immediately detected by network supervision tools.
intrusion detection systems (IDS) analyze packets either according to a set of rules, or according to a behavioral model, to determine which ones correspond to an attack.
Let's assume that any abnormal traffic on the network is either listened in on or detected, and therefore cannot be used as a channel. This requires various countermeasures to be in place on the network, essentially IDSs that will attempt to detect suspicious traffic. The other constraint not to be overlooked concerns the network on which the channel will exist: its equipment and architecture also come into play, as they can bring modifications...
The Ultimate Scientific and Technical Reference
This article is included in
Security of information systems
This offer includes:
Knowledge Base
Updated and enriched with articles validated by our scientific committees
Services
A set of exclusive tools to complement the resources
Practical Path
Operational and didactic, to guarantee the acquisition of transversal skills
Doc & Quiz
Interactive articles with quizzes, for constructive reading
The problem of a hidden channel on a network
Generalization
References
The Ultimate Scientific and Technical Reference
