Indirect DNS Covert Channel based on Base 16 Matrix for Stealth Short Message Transfer
Covert Channel are the methods to conceal a message in the volatile medium carrier such as radio signal and network packets. Until now, covert channels based on the packet length produce abnormal packet length when the length of the message is long. Abnormal packet length, especially in the normal network will expose the covert channels to network security perimeter. Therefore, it motivates the study to propose a new method based on reference matrix to hide the secret message in DNS request. Normal DNS request packet was collected from the campus network. The proposed packets length covert channel was compared with normal DNS request packets. The study found that the new purpose covert channels produce normal DNS packet length according to the campus network.
Keywords: Covert Channels, Packet length, DNS
Download Full-Text
ABOUT THE AUTHORS
Md Asri Ngadi
Md Asri Ngadi received his BSc in Computer Science,and the MSc in Computer Systems from Universiti Teknologi Malaysia in 1997 and 1999 respectively, and the PhD degree from Aston University, UK in 2004. He is an associate professor in the Faculty of Computer Science and Information System, Universiti Teknologi Malaysia His research interests are computer systems and security,information assurance and network security
Syaril Nizam Omar
Syaril Nizam Omar is currently a PhD student in the Department of Computer Systems and Communications of the Faculty of Computer Science and Information Systems at the Universiti Teknologi Malaysia. He obtained M.Sc. Information Security from Universiti Teknologi Malaysia (Malaysia) in 2008. He has been involved in lots of academic research since then; presently he is a member of Pervasive Computing Research Group at UTM, while his research interest Covert Channel. He has published in many national and international learned journals.
Ismail Ahmedy
Ismail Ahmedy is currently persuing PhD in wireless sensor networks at department of computer system and communication, faculty of computer science and information system, universiti teknologi malaysia. He currently hold an academic post in university malaya since 2009. He obtained M.Sc. (Computer Science) from university of queensland, australia in 2009 and B.S.c (Computer Science) from universiti teknologi malaysia in 2006. His research interest is in wireless sensor networks (protocol and signal coverage).
Md Asri Ngadi
Md Asri Ngadi received his BSc in Computer Science,and the MSc in Computer Systems from Universiti Teknologi Malaysia in 1997 and 1999 respectively, and the PhD degree from Aston University, UK in 2004. He is an associate professor in the Faculty of Computer Science and Information System, Universiti Teknologi Malaysia His research interests are computer systems and security,information assurance and network security
Syaril Nizam Omar
Syaril Nizam Omar is currently a PhD student in the Department of Computer Systems and Communications of the Faculty of Computer Science and Information Systems at the Universiti Teknologi Malaysia. He obtained M.Sc. Information Security from Universiti Teknologi Malaysia (Malaysia) in 2008. He has been involved in lots of academic research since then; presently he is a member of Pervasive Computing Research Group at UTM, while his research interest Covert Channel. He has published in many national and international learned journals.
Ismail Ahmedy
Ismail Ahmedy is currently persuing PhD in wireless sensor networks at department of computer system and communication, faculty of computer science and information system, universiti teknologi malaysia. He currently hold an academic post in university malaya since 2009. He obtained M.Sc. (Computer Science) from university of queensland, australia in 2009 and B.S.c (Computer Science) from universiti teknologi malaysia in 2006. His research interest is in wireless sensor networks (protocol and signal coverage).
