wendzel.de

 

2007: Protocol Hopping Covert Channels

Protocol Hopping Covert Channels (PHCC) are a way to realize covert channels that switch between different protocols while a covert channel is established. PHCCs even can use a randomized protocol order and a mixed packet order to transfer packets what makes them hard to detect.

Papers and Diploma Thesis

English: Steffen Wendzel: Protocol Hopping Covert Channels. An Idea & the Implementation of a Protocol switching covert channel, Nov-2007.

German: Steffen Wendzel: Protocol Hopping Covert Channels, Hakin9 03/2008.

German: Steffen Wendzel: Diplomarbeit zum Thema 'Protokollwechsel zur Realisierung von Covert Channels und Header-Strukturveränderungen zur Vermeidung von Covert Channels', Kempten University of Applied Sciences, May-2009.

Proof of Concept Code

A sample implementation called phcct (protocol hopping covert channel tool) also known as takushi (what is japanese for taxi) was implemented. It can be found here.

 
Current Books


Einstieg in Linux



Linux. Das umfassende Handbuch