A Covert channel in RTP protocol

Show full item record

Title: A Covert channel in RTP protocol
Author: Johnson, Daryl; Yuan, Bo; Lutz, Peter; Forbes, Christopher
Abstract: A new covert channel over the RTP protocol is designed and implemented by modifying the timestamp value in the RTP header. Due to the high frequency of RTP packets, the covert channel has a high bit-rate, theoretically up to 350 bps. The broad use of RTP for multimedia applications such as VoIP, provides abundant opportunities to such a covert channel to exist. By using the RTP header, many of the challenges present for covert channels using the RTP payload are avoided. A reference implementation of this covert channel is presented. Bit-rates of up to 325 bps were observed. The channel is very difficult to detect due to expected variations in the timestamp field and the flexible nature of RTP.
Record URI: http://hdl.handle.net/1850/14793
Date: 2010

Files in this item

Files Size Format View
FLINS-2010-Forbes-covert_rtp.pdf 104.1Kb PDF View/Open

The following license files are associated with this item:

This item appears in the following Collection(s)

Show full item record

Search RIT DML


Advanced Search

Browse