Traceroute Based IP Channel for Sending Hidden Short Messages

  • Zouheir Trabelsi
  • Hesham El-Sayed
  • Lilia Frikha
  • Tamer Rabie
Conference paper

DOI: 10.1007/11908739_30

Volume 4266 of the book series Lecture Notes in Computer Science (LNCS)
Cite this paper as:
Trabelsi Z., El-Sayed H., Frikha L., Rabie T. (2006) Traceroute Based IP Channel for Sending Hidden Short Messages. In: Yoshiura H., Sakurai K., Rannenberg K., Murayama Y., Kawamura S. (eds) Advances in Information and Computer Security. IWSEC 2006. Lecture Notes in Computer Science, vol 4266. Springer, Berlin, Heidelberg

Abstract

The paper proposes a novel IP channel for sending hidden short messages, based mainly on the use of the “traceroute” command and the IP header Record route options. Instead of encrypting a hidden message or embedding it into a multimedia object, as in traditional multimedia steganography, we process the entire message and generate several IP packets with different types to carry the secret message. Thereby we foil an eavesdropper who is primarily applying statistical tests to detect encrypted communication channels. We show that our approach provides more protection against Steganalysis and sniffing attacks. A friendly graphical tool has been implemented to demonstrate the proposed secret IP channel.

Keywords

Covert channel Hidden information IP header Record route option Steganalysis Traceroute 

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

Copyright information

© Springer-Verlag Berlin Heidelberg 2006

Authors and Affiliations

  • Zouheir Trabelsi
    • 1
  • Hesham El-Sayed
    • 1
  • Lilia Frikha
    • 2
  • Tamer Rabie
    • 1
  1. 1.College of Information TechnologyUnited Arab Emirates UniversityAl AinUnited Arab Emirates
  2. 2.College of Telecommunications (SupCom)The University of Tunisia, Cité Technologique des CommunicationsEl Ghazala, ArianaTunisia