2007: Protocol Hopping Covert Channels
Protocol Hopping Covert Channels (PHCC) are a way to realize covert channels that switch between different
protocols while a covert channel is established. PHCCs even can use a randomized protocol order and a mixed
packet order to transfer packets what makes them hard to detect.
Papers and Diploma Thesis
English: Steffen Wendzel: Protocol Hopping Covert Channels. An Idea & the Implementation of a Protocol switching covert channel, Nov-2007.
German: Steffen Wendzel: Protocol Hopping Covert Channels, Hakin9 03/2008.
German: Steffen Wendzel: Diplomarbeit zum Thema 'Protokollwechsel zur Realisierung von Covert Channels und Header-Strukturveränderungen zur Vermeidung von Covert Channels', Kempten University of Applied Sciences, May-2009.
Proof of Concept Code
A sample implementation called phcct (protocol hopping covert channel tool) also known as takushi (what
is japanese for taxi) was implemented. It can be found here.
|