HIDE_DHCP: Covert Communications Through Network Configuration Messages

TitleHIDE_DHCP: Covert Communications Through Network Configuration Messages
Publication TypeConference Paper
Year of Publication2012
AuthorsR. Rios, J. A. Onieva, and J. Lopez
EditorD. Gritzalis, S. Furnell, and M. Theoharidou
Conference NameProceedings of the 27th IFIP TC 11 International Information Security and Privacy Conference (SEC 2012)
Series TitleIFIP AICT
Volume376
Pagination162-173
Date PublishedJune 2012
PublisherSpringer Boston
Conference LocationHeraklion, Crete, Greece
ISBN Number978-3-642-30435-4
ISSN Number1868-4238
KeywordsCovert channels, Network Security, System Information Security
Abstract

Covert channels are a form of hidden communication that may violate the integrity of systems. Since their birth in multilevel security systems in the early 70’s they have evolved considerably, such that new solutions have appeared for computer networks mainly due to vague protocols specifications. We analyze a protocol extensively used today, the Dynamic Host Configuration Protocol (DHCP), in search of new forms of covert communication. From this analysis we observe several features that can be effectively exploited for subliminal data transmission. This results in the implementation of HIDE_DHCP, which integrates three covert channels that accommodate to different stealthiness and bandwidth requirements

DOI10.1007/978-3-642-30436-1_14
Citation KeyRios2012
Paper File: 
https://www.nics.uma.es/sites/default/files/papers/Rios2012_0.pdf

Supported by