An assessment of VoIP covert channel threats

Proceedings of the 3rd International Conference on Security and Privacy in Communication Networks, SecureComm

Volumn , Issue , 2007, Pages 371-380

  Takahashi, Takehiro ^a   Lee, Wenke ^a  

^a Georgia Institute of Technology   (United States)

Author keywords

Channel capacity; Covert communication; Security of data; Voice over Ip; VoIP covert channel; Watermarking

Indexed keywords

CHANNEL CAPACITY; COVERT COMMUNICATION; SECURITY OF DATA; VOICE OVER IP; VOIP COVERT CHANNEL; WATERMARKING;

COMPUTER NETWORKS; INTERNET PROTOCOLS; RISK ASSESSMENT; TELECOMMUNICATION NETWORKS; TELECOMMUNICATION SYSTEMS; VOICE/DATA COMMUNICATION SYSTEMS;

TELEPHONE SYSTEMS;

EID: 51349112497     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SECCOM.2007.4550357     Document Type: Conference Paper

References (34)

1. Department of Defense. Department of Defense Trusted Computer System Evaluation Criteria, DOD 5200.28-STD (The Orange Book) edition, December 1985.
2. Ram Dantu and Prakash Kolan. Detecting Spam in VoIP Networks. In Proceedings of the Steps to Reducing Unwanted Traffic on the Internet Workshop, pages 31-37, Cambridge, MA, July 2005.
3. Evan Cooke, Farnam Jahanian, and Danny McPherson. The zombie roundup: Understanding, detecting, and disrupting botnets. In Proceedings of USENIX Steps to Reducing Unwanted Traffic on the Internet Workshop (SRUTI), pages 39-44, July 2005.
4. Felix C. Freiling, Thorsten Holz, and Georg Wicherski. Botnet tracking: Exploring a root-cause methodology to prevent distributed denial-ofservice attacks. In Proceedings of the 10th European Symposium on Research in Computer Security (ESORICS), volume 3679 of Lecture Motes in Computer Science, pages 319-335, September 2005.
5. M. Handley, H. Schulzrinne, E. Schooler, and J. Rosenberg. SIP: session initiation protocol. RFC 2543, Internet Engineering Task Force, 1999.
6. ITU-T Recommendation H.323. Infrastructure of audio-visual services - systems and terminal equipment for audio-visual services: Packet-based multimedia communications systems. Technical report, Telecommunication Standardization Sector of ITU, 2000. Draft Version 4.
7. H. Schulzrinne, S. Casner, R. Frederick, and V Jacobson. RTP: A Transport Protocol for Real-Time Applications. Internet Draft, revision of RFC 1889, January 2000.
8. International Telecommunication Union. Methods for subjective determination of transmission quality. Recommendation P.800, Telecommunication Standardization Sector of ITU, Geneva, Switzerland, August 1996.
9. International Telecommunication Union. Perceptual evaluation of speech quality (PESQ), an objective method for end-to-end speech quality assessment of narrowband telephone networks and speech codecs. Recommendation, Telecommunication Standardization Sector of ITU, Geneva, Switzerland, February 2001.
10. B. W. Lampson. A note on the confinement problem. Communications of the ACM, 16(10):613-615, October 1973.
11. Jonathan K. Millen. Covert channel capacity. pages 60-66, 1987.
12. J.C. Huskamp. Covert Communication Channels in Timesharing Systems. PhD thesis, University of California, Berkley, 1978.
13. W. Mazurczyk and Z. Kotulski. New security and control protocol for voip based on steganography and digital watermarking. Annales UMCS, Informatica, 2006.
14. Naofumi Aoki. Development of a voip system implementing a high quality packet loss concealment technique. In Canadian Conference on Electrical and Computer Engineering 2005, Saskatoon Inn, May 2005.
15. R.W. Hamming. Error detecting and error correcting codes. Bell System Technical Journal, 29:147-160, April 1950.
16. I. S. Reed and G. Solomon. Polynomial codes over certain finite fields. 8(2):300-304, June 1960.
17. David Wagner and Drew Dean. Intrusion detection via static analysis. In SP '01: Proceedings of the 2001 IEEE Symposium on Security and Privacy, page 156, Washington, DC, USA, 2001. IEEE Computer Society.
18. Suresh N. Chari and Pau-Chen Cheng. Bluebox: A policy-driven, hostbased intrusion detection system. ACM Trans. Inf. Syst. Secur., 6(2):173-200, 2003.
19. Stefan Katzenbeisser and Fabien A. Petitcolas, editors. Information Hiding Techniques for Steganography and Digital Watermarking. Artech House, Inc., Norwood, MA, USA, 2000.
20. W. Bender, D. Gruhl, N. Morimoto, and A. Lu. Techniques for data hiding. IBM Systems Journal, 35(3&4), 1996. MIT Media Lab.
21. J. D. Gordy and L. T. Bruton. Performance evaluation of digital audio watermarking algorithms.
22. Open Speech Repository. The open speech repository project. http://www.voiptroubleshooter.com/open_speech/index.html.
23. Hamza Özer, Bülent Sankur, Nasir Memon, and Ismail Avcibas. Detection of audio covert channels using statistical footprints of hidden messages. Digital Signal Processing, 16(4):389-401, 2006.
24. Fabien A. P. Petitcolas, Ross J. Anderson, and Markus G. Kuhn. Attacks on copyright marking systems. In Information Hiding, pages 218-238, 1998.
25. Kanaan Jemili Rade Petrovic, Joseph M. Winograd and Eric Metois, Data hiding within audio signals. Technical Report 2, Facta Universitatis, Nis, Serbia, October 1999. A version of this paper was presented at the fourth Conference Telecommunicationsin Modern Satellite and Cable Services.
26. T. Chen K.N. Hamdy, A.H. Tewik and S. Takagi. Time-scale modification of audio signals with combined harmonic and wevelet representations. International Conference on Acoustics, Speech and Signal Processing, 1997.
27. M.R.R. Healy B.P. Bogert and J.W. Tukey. The quefrency alanysis of time series for echoes: cepstrum, pseudo-autocovariance, crosscepstrum, and saphe cracking. Symposium Time Series Analysis, 1963.
28. Andreas Westfeld and Andreas Pfitzmann. Attacks on steganographic systems. In IH '99: Proceedings of the Third International Workshop on Information Hiding, pages 61-76, London, UK, 2000. Springer-Verlag.
29. I. Avcibas O.H. Kocal, E. Yuruklu. Speech steganalysis using chaotictype features. European Signal Processing, 2005.
30. I. Avcibas. Audio steganalysis with content-independent distortion measures. Signal Processing Letters, 2006.
31. S. R. Quackenbush, T. P. Barnwell, and M. A. Clements. Objective Measures of Speech Quality. Prentice-Hall, Englewood Cliffs, NJ, 1988.
32. Fumitada ltakura. Minimum prediction residual principle applied to speech recognition, pages 154-158, 1990.
33. I. Avcibas, B. Sankur, and K. Sayood. Statistical evaluation of image quality measures. Journal of Electronic Imaging, 11(2):206-223, April 2002.
34. Voice over IP Security Alliance. VoIP security organization. http://www.voipsa.org/.