Nafea, H, Kifayat, K, Shi, Q, Qureshi, KN and Askwith, RJ (2019) Efficient Non-Linear Covert Channel Detection in TCP Data Streams. IEEE Access, 8. pp. 1680-1690. ISSN 2169-3536

Preview

Text Covert Channel Detection-Accepted Version.pdf - Published Version Available under License Creative Commons Attribution. Download (5MB) | Preview

Abstract

Cyber-attacks are causing losses amounted to billions of dollars every year due to data breaches and vulnerabilities. The existing tools for data leakage prevention and detection are often bypassed by using various different types of sophisticated techniques such as network steganography for stealing the data. This is due to several weaknesses which can be exploited by a threat actor in existing detection systems. The weaknesses are high time and memory training complexities as well as large training datasets. These challenges become worse when the amount of generated data increases in every second in many realms. In addition, the number of false positives is high which makes them inaccurate. Finally, there is a lack of a framework catering for the needs such as raising alerts as well as data monitoring and updating/adapting of a threshold value used for checking the data packets for covert data. In order to overcome these weaknesses, this paper proposes a novel framework that includes elements such as continuous data monitoring, threshold maintenance, and alert notification. This paper also proposes a model based on statistical measures to detect covert data leakages, especially for non-linear chaotic data. The main advantage of the proposed model is its capability to provide results with tolerance/threshold values much more efficiently. Our experiments indicate that the proposed framework has low false positives and outperforms various existing techniques in terms of accuracy and efficiency.

Item Type:	Article
Subjects:	Q Science > QA Mathematics > QA75 Electronic computers. Computer science
Divisions:	Computer Science & Mathematics
Publisher:	Institute of Electrical and Electronics Engineers (IEEE)
Date Deposited:	22 Jan 2020 09:39
Last Modified:	04 Sep 2021 08:05
DOI or ID number:	10.1109/ACCESS.2019.2961609
URI:	https://researchonline.ljmu.ac.uk/id/eprint/12075

View Item