Covert Channel Detection Using Process Query Systems (White Paper)
• White Paper
In this FloCon 2005 presentation, the author uses traffic analysis to investigate a stealthy form of data exfiltration.
Publisher
Software Engineering Institute
Subjects
Abstract
<p>In this paper, presented at FloCon 2005, the author uses traffic analysis to investigate a stealthy form of data exfiltration. The author presents an approach to detect covert channels based on a Process Query System (PQS), a new type of information retrieval technology in which queries are expressed as process descriptions.
Part of a Collection
FloCon 2005 Collection
This content was created for a conference series or symposium and does not necessarily reflect the positions and views of the Software Engineering Institute.