Matches in SemOpenAlex for { <https://semopenalex.org/work/W2967841396> ?p ?o ?g. }
Showing items 1 to 80 of
80
with 100 items per page.
- W2967841396 abstract "Detection methods are available for several known covert channels. However, a type of covert channel that received little attention within the last decade is the message ordering channel. Such a covert channel changes the order of PDUs (protocol data units, i.e. packets) transferred over the network to encode hidden information. The advantage of these channels is that they cannot be blocked easily as they do not modify header content but instead mimic typical network behavior such as TCP segments that arrive in a different order than they were sent. Contribution: In this paper, we show a protocol-independent approach to detect message ordering channels. Our approach is based on a modified compressibility score. We analyze the detectability of message ordering channels and whether several types of message ordering channels differ in their detectability. Results: Our results show that the detection of message ordering channels depends on their number of utilized PDUs. First, we performed a rough threshold selection by hand, which we later optimized using the C4.5 decision tree classifier. We were able to detect message ordering covert channels with an accuracy and F1 score of >= 99.5% and a false-positive rate < 1% and < 0.1% if they use sequences of 3 or 4 PDUs, respectively. Simpler channels that only manipulate a sequence of two PDUs were detectable with an accuracy and F1 score of 94.5% and were linked to a false-positive rate of 5.19%. We thus consider our approach suitable for real-world detection scenarios with channels utilizing 3 or 4 PDUs while the detection of channels utilizing 2 PDUs should be improved further." @default.
- W2967841396 created "2019-08-22" @default.
- W2967841396 creator A5072118587 @default.
- W2967841396 date "2019-08-26" @default.
- W2967841396 modified "2023-09-23" @default.
- W2967841396 title "Protocol-independent Detection of Messaging Ordering Network Covert Channels" @default.
- W2967841396 cites W1981844530 @default.
- W2967841396 cites W1993704367 @default.
- W2967841396 cites W2011224223 @default.
- W2967841396 cites W2076003763 @default.
- W2967841396 cites W2120467192 @default.
- W2967841396 cites W2151185692 @default.
- W2967841396 cites W2887451643 @default.
- W2967841396 cites W2892573581 @default.
- W2967841396 cites W2899134074 @default.
- W2967841396 cites W2939175835 @default.
- W2967841396 cites W4254812591 @default.
- W2967841396 doi "https://doi.org/10.1145/3339252.3341477" @default.
- W2967841396 hasPublicationYear "2019" @default.
- W2967841396 type Work @default.
- W2967841396 sameAs 2967841396 @default.
- W2967841396 citedByCount "0" @default.
- W2967841396 crossrefType "proceedings-article" @default.
- W2967841396 hasAuthorship W2967841396A5072118587 @default.
- W2967841396 hasBestOaLocation W29678413962 @default.
- W2967841396 hasConcept C103377522 @default.
- W2967841396 hasConcept C104317684 @default.
- W2967841396 hasConcept C111919701 @default.
- W2967841396 hasConcept C124101348 @default.
- W2967841396 hasConcept C127162648 @default.
- W2967841396 hasConcept C138885662 @default.
- W2967841396 hasConcept C158379750 @default.
- W2967841396 hasConcept C184842701 @default.
- W2967841396 hasConcept C185592680 @default.
- W2967841396 hasConcept C2779338814 @default.
- W2967841396 hasConcept C29024540 @default.
- W2967841396 hasConcept C31258907 @default.
- W2967841396 hasConcept C41008148 @default.
- W2967841396 hasConcept C41895202 @default.
- W2967841396 hasConcept C48105269 @default.
- W2967841396 hasConcept C55493867 @default.
- W2967841396 hasConcept C66746571 @default.
- W2967841396 hasConcept C79974875 @default.
- W2967841396 hasConceptScore W2967841396C103377522 @default.
- W2967841396 hasConceptScore W2967841396C104317684 @default.
- W2967841396 hasConceptScore W2967841396C111919701 @default.
- W2967841396 hasConceptScore W2967841396C124101348 @default.
- W2967841396 hasConceptScore W2967841396C127162648 @default.
- W2967841396 hasConceptScore W2967841396C138885662 @default.
- W2967841396 hasConceptScore W2967841396C158379750 @default.
- W2967841396 hasConceptScore W2967841396C184842701 @default.
- W2967841396 hasConceptScore W2967841396C185592680 @default.
- W2967841396 hasConceptScore W2967841396C2779338814 @default.
- W2967841396 hasConceptScore W2967841396C29024540 @default.
- W2967841396 hasConceptScore W2967841396C31258907 @default.
- W2967841396 hasConceptScore W2967841396C41008148 @default.
- W2967841396 hasConceptScore W2967841396C41895202 @default.
- W2967841396 hasConceptScore W2967841396C48105269 @default.
- W2967841396 hasConceptScore W2967841396C55493867 @default.
- W2967841396 hasConceptScore W2967841396C66746571 @default.
- W2967841396 hasConceptScore W2967841396C79974875 @default.
- W2967841396 hasLocation W29678413961 @default.
- W2967841396 hasLocation W29678413962 @default.
- W2967841396 hasLocation W29678413963 @default.
- W2967841396 hasOpenAccess W2967841396 @default.
- W2967841396 hasPrimaryLocation W29678413961 @default.
- W2967841396 hasRelatedWork W174282171 @default.
- W2967841396 hasRelatedWork W1992415533 @default.
- W2967841396 hasRelatedWork W2129389941 @default.
- W2967841396 hasRelatedWork W2157970202 @default.
- W2967841396 hasRelatedWork W2357367573 @default.
- W2967841396 hasRelatedWork W2464016569 @default.
- W2967841396 hasRelatedWork W2894559103 @default.
- W2967841396 hasRelatedWork W2967841396 @default.
- W2967841396 hasRelatedWork W3007114941 @default.
- W2967841396 hasRelatedWork W3044688625 @default.
- W2967841396 isParatext "false" @default.
- W2967841396 isRetracted "false" @default.
- W2967841396 magId "2967841396" @default.
- W2967841396 workType "article" @default.