Details of Research Outputs

Covert Timing Channel (CTC) is a process of covert information transmission using existing network resources for information hiding and distribution of secret and sensitive date. By exploiting Inter-packet delays (IPDs) of legitimate network traffic, which is a network resources that were not designed for the purpose of communication, they have the ability that traditional security strategies, such as firewalls and intrusion detection systems, cannot effectively distinguish and disrupt them. In this paper, we propose a novel approach, CTC Multi-Threshold Detection (CTCMTD) to detect different CTCs and legitimate traffic. We extract four features of traffic samples for muti-classification by analysis its perceptual discrimination and robustness. We have shown that the method based on perceptual hashing has great potential to muti-classificate CTCs blindly.