[Full-disclosure] [paper] protocol hopping covert channels
Steffen Wendzel
cdp_xe at gmx.net
Tue Nov 13 18:22:40 GMT 2007
hi,
I just wrote a new paper about a way to realize covert channels I call
"protocol hopping covert channels". I also wrote a simple PoC code.
>>Protocol Hopping Covert Channels (PHCC) are a way to realize covert
channels that switch between different protocols while a covert channel
is established. PHCCs even can use a randomized protocol order and a
mixed packet order to transfer packets what makes them hard to
detect.<<
The paper and the PoC code is available here:
http://doomed-reality.org/?sub=research&ssub=phcc_res
regards
Steffen Wendzel
--
http://doomed-reality.org/?sub=about&ssub=steffen
Full-Disclosure is hosted and sponsored by Secunia.