A Covert channel in RTP protocol

Show simple item record

dc.contributor.advisor n/a
dc.contributor.author Johnson, Daryl
dc.contributor.author Yuan, Bo
dc.contributor.author Lutz, Peter
dc.contributor.author Forbes, Christopher
dc.date.accessioned 2012-02-21T18:26:08Z
dc.date.available 2012-02-21T18:26:08Z
dc.date.issued 2010
dc.identifier.uri http://hdl.handle.net/1850/14793
dc.description.abstract A new covert channel over the RTP protocol is designed and implemented by modifying the timestamp value in the RTP header. Due to the high frequency of RTP packets, the covert channel has a high bit-rate, theoretically up to 350 bps. The broad use of RTP for multimedia applications such as VoIP, provides abundant opportunities to such a covert channel to exist. By using the RTP header, many of the challenges present for covert channels using the RTP payload are avoided. A reference implementation of this covert channel is presented. Bit-rates of up to 325 bps were observed. The channel is very difficult to detect due to expected variations in the timestamp field and the flexible nature of RTP.
dc.language.iso en_US
dc.subject Bit-rate en_US
dc.subject Covert channels en_US
dc.subject RTP protocol en_US
dc.title A Covert channel in RTP protocol

Files in this item

Files Size Format View
FLINS-2010-Forbes-covert_rtp.pdf 104.1Kb PDF View/Open

This item appears in the following Collection(s)

Show simple item record

Search RIT DML


Advanced Search

Browse