[Full-disclosure] [paper] protocol hopping covert channels

Steffen Wendzel cdp_xe at gmx.net
Tue Nov 13 18:22:40 GMT 2007


hi,

I just wrote a new paper about a way to realize covert channels I call
"protocol hopping covert channels". I also wrote a simple PoC code.

>>Protocol Hopping Covert Channels (PHCC) are a way to realize covert
channels that switch between different protocols while a covert channel
is established. PHCCs even can use a randomized protocol order and a
mixed packet order to transfer packets what makes them hard to
detect.<<

The paper and the PoC code is available here:
http://doomed-reality.org/?sub=research&ssub=phcc_res

regards
Steffen Wendzel

-- 
http://doomed-reality.org/?sub=about&ssub=steffen




Full-Disclosure is hosted and sponsored by Secunia.