A New covert channel over RTP

Show simple item record

dc.contributor.advisor Yuan, Bo en_US
dc.contributor.author Forbes, Christopher
dc.date.accessioned 2010-10-27T18:46:45Z
dc.date.available 2010-10-27T18:46:45Z
dc.date.issued 2009
dc.identifier.uri http://hdl.handle.net/1850/12883
dc.description.abstract In this thesis, we designed and implemented a new covert channel over the RTP protocol. The covert channel modifies the timestamp value in the RTP header to send its secret messages. The high frequency of RTP packets allows for a high bitrate covert channel, theoretically up to 350 bps. The broad use of RTP for multimedia applications, including VoIP, provides plentiful opportunities to use this channel. By using the RTP header, many of the challenges present for covert channels using the RTP payload are avoided. Using the reference implementation of this covert channel, bitrates of up to 325 bps were observed. Speed decreases on less reliable networks, though message delivery was flawless with up to 1% RTP packet loss. The channel is very difficult to detect due to expected variations in the timestamp field and the flexible nature of RTP.
dc.language.iso en_US
dc.subject Channel en_US
dc.subject Covert en_US
dc.subject RTP en_US
dc.subject Steganography en_US
dc.subject Timestamp en_US
dc.subject VoIP en_US
dc.subject.lcc QA79.6.A25 F672 2009
dc.subject.lcsh Computer security
dc.subject.lcsh Internet telephony--Security measures
dc.subject.lcsh Cryptography
dc.subject.lcsh Real-time data processing
dc.subject.lcsh Computer network protocols
dc.title A New covert channel over RTP
dc.type Thesis

Files in this item

Files Size Format View
CForbesThesis8-21-2009.pdf 1.038Mb PDF View/Open

This item appears in the following Collection(s)

Show simple item record

Search RIT DML


Advanced Search

Browse