- All Journals
- Al-Qadisiyah University
- Basrah University
- Kirkuk University
- Mosul University
- The Iraqi Borad for Medical Specialization
- University of Anbar
- University of Technology
- Al Mustafa University
- Al-Zahraa University for Women
- Alnoor University
- Kunooz University
- Misan University
- Ninevah University
- Tikrit University
- University of Al-Hamdaniya
- University of Kerbala
Covert Channel in IP Packet Using DS Field | ||
| Al-Mustansiriyah Journal of Science | ||
| Article 1, Volume 17, Issue 4, 2006, Pages 104-118 | ||
| Author | ||
| Amir S. Al-Malah | ||
| Abstract | ||
| Due to the wide spread use of computer networks in our life; the networks have used a universal protocol (TCP/IP) for communication, with increasing interests for security tools. In fact, little attention was paid to such traditional security aspect during the development of TCP/IP protocol. This work involves the manipulation of the Differentiated Service (DS) field in the IP packet header for implication of a covert channel. The hidden data, which are carried by the DS field, are recognized at the receiver site using digital signature. The work overcome the problems that faces the users of TCP/IP covert channels, these are mainly concentrated on the limitation of the message length and the recognizability of the hidden data by the intrusions. The work is based on the development of the covert channel in the Microsoft Windows platform. Therefore, the work has deal with techniques that allow the interception of a subset of functions from the kernel mode. To do this a driver that hooks the Network Driver Interface Specification (NDIS) function is developed, thus manipulation of the IP header in the user mode becomes permitted. Finally the extraction of the Ethernet packets is done by creation of Data Link Library (DLL). | ||
|
Statistics Article View: 39 PDF Download: 33 |
||