Messing with packet sizes could also be an option?
No need to.
Steganographic Packets
11–16 of 16 posts
Re: Steganographic Packets
#12The real art is being able to decipher these pulse-width modulated packets across multiple hops (and switches) while factoring in the variances Of traffic flow that surges through each hops.
Re: Steganographic Packets
#13Re: Steganographic Packets
#14Earlier quoted context omitted.
Thanks. I hadn't really given much thought for any widespread practical use. I think the throughput would be the limiting factor, on average (using my encoding scheme, which could definitely be optimised) you average about 5.882 Bps. Would definitely be interested in hearing what uses people see for it though!
The first thought that comes to mind is Tor's pluggable transports used to bypass censorship. Admittedly 6Bps isn't good enough for that (I think), but it might be possible to combine it with other mechanisms or increase that number? https://www.torproject.org/docs/pluggable-transports.html.en
While TOR represent the worst kind of the variances of inter-packet delay of all network topology, the devil in the details is compensating for the largest “single-hop”-like variance.
Re: Steganographic Packets
#15This is nothing new. This is a form of covert channel:
https://en.m.wikipedia.org/wiki/Covert_channel
Specifically from the Wiki artical see the Timing Channel section.
Another interesting concept is to hide the bits in the unused options in protocol header fields (see the "Data hiding in TCP/IP Protocol suite by covert channels" section on the same Wiki artical).
I was looking for example code snippets online and found some examples of hiding bits in packet headers but, not in inter-packet timings. I ended up writing a transmit and receive script one afternoon at my desk out of boredom (although, just as a proof of concept to myself, I didn't take the time to refine to the superior levels of the OP, such as bit rate or reliability, as I never intended to use it): https://null.53bits.co.uk/index.php?page=icmp-messages
It would be nice to combine the technique used in some header-bit-packing scripts with the OPs timing based script; whereby one specifies the destination IP we want to communicate to secretly and alter the buffering of packets only to that IP. I never bothered to refine my scripts beyond "Hello World" because the timing based approach requires one to generate traffic that possibly otherwise wouldn't exist between the source and destination IP. Encoding bits in the inter-packet delay of existing "legitimate" flows to the destination would require it to be relatively close in terms of latency.
Re: Steganographic Packets
#16This is nothing new. This is a form of covert channel: https://en.m.wikipedia.org/wiki/Covert_channel Specifically from the Wiki artical see the Timing Channel section. Another interesting concept is to hide the bits in the unused options in protocol header fields (see the "Data hiding in TCP/IP Protocol suite by covert channels" section on the same Wiki artical). I was looking for example code snippets online and fo…
Not sure if you spotted the links in the post itself, but there's a working (basic) proof of concept here: https://github.com/vimist/packet_differential_encoding
Boyan commented on the post itself suggesting applying coding & modulation theory, which I thought was an interesting point.