Detect Covert Channels in TCP/IP Header using Naive Bayes

Covert channels via the widely used TCP/IP protocols have become a new challenging issue for network security. It is a methodology of communication which illicitly transfers data, it means by breaking security policy of system. Any shared resource will be used as a covert channel. It may be a good thing if covert channels are used to protect privacy or increase security of critical communication. Hidden data in the payload can detect by most of the detection systems in early days, but hidden data in IP and TCP packet headers survives a struggle. In this paper, proposed method is based on naive bayes classifier to detect covert channels in TCP ISN and IP ID fields of TCP/IP packets. Keywords— TCP, IP, TCP ISN, IP ID, covert