{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,11]],"date-time":"2026-04-11T13:13:35Z","timestamp":1775913215333,"version":"3.50.1"},"publisher-location":"Berlin, Heidelberg","reference-count":22,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"value":"9783642304354","type":"print"},{"value":"9783642304361","type":"electronic"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2012]]},"DOI":"10.1007\/978-3-642-30436-1_14","type":"book-chapter","created":{"date-parts":[[2012,6,5]],"date-time":"2012-06-05T16:20:29Z","timestamp":1338913229000},"page":"162-173","source":"Crossref","is-referenced-by-count":7,"title":["HIDE_DHCP: Covert Communications through Network Configuration Messages"],"prefix":"10.1007","author":[{"given":"Ruben","family":"Rios","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jose A.","family":"Onieva","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Javier","family":"Lopez","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"key":"14_CR1","unstructured":"Brand, S.L.: Department of Defense Trusted Computer System Evaluation Criteria, \u201cThe Orange Book\u201d. Tech. Rep. DoD 5200.28-STD, U.S. Department of Defense (1985), \n                    \n                      http:\/\/csrc.nist.gov\/publications\/history\/dod85.pdf"},{"key":"14_CR2","doi-asserted-by":"publisher","first-page":"178","DOI":"10.1145\/1030083.1030108","volume-title":"Proceedings of the 11th ACM Conference on Computer and Communications Security, CCS 2004","author":"S. Cabuk","year":"2004","unstructured":"Cabuk, S., Brodley, C.E., Shields, C.: IP Covert Timing Channels: Design and Detection. In: Proceedings of the 11th ACM Conference on Computer and Communications Security, CCS 2004, pp. 178\u2013187. ACM Press, New York (2004)"},{"key":"14_CR3","doi-asserted-by":"crossref","unstructured":"Cabuk, S., Brodley, C.E., Shields, C.: IP Covert Channel Detection. ACM Trans. Inf. Syst. Secur.\u00a012, 22:1\u201322:29 (2009)","DOI":"10.1145\/1513601.1513604"},{"key":"14_CR4","unstructured":"Daemon9: Loki2 (the implementation) (1997), \n                    \n                      http:\/\/www.phrack.org\/archives\/51\/P51-06"},{"key":"14_CR5","doi-asserted-by":"crossref","unstructured":"Droms, R.: RFC 2131 - Dynamic Host Configuration Protocols (1997), \n                    \n                      http:\/\/www.ietf.org\/rfc\/rfc2131.txt","DOI":"10.17487\/rfc2131"},{"key":"14_CR6","unstructured":"Dyatlov, A.: Firepass - Gray-World.net Team (2003), \n                    \n                      http:\/\/gray-world.net\/it\/pr_firepass.shtml"},{"key":"14_CR7","doi-asserted-by":"crossref","first-page":"785","DOI":"10.1109\/TDSC.2010.46","volume":"8","author":"S. Gianvecchio","year":"2011","unstructured":"Gianvecchio, S., Wang, H.: An entropy-based approach to detecting covert timing channels. IEEE Trans. Dependable Secur. Comput.\u00a08, 785\u2013797 (2011)","journal-title":"IEEE Trans. Dependable Secur. Comput."},{"key":"14_CR8","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"194","DOI":"10.1007\/3-540-36467-6_15","volume-title":"Privacy Enhancing Technologies","author":"J. Giffin","year":"2003","unstructured":"Giffin, J., Greenstadt, R., Litwack, P., Tibbetts, R.: Covert Messaging through TCP Timestamps. In: Dingledine, R., Syverson, P.F. (eds.) PET 2002. LNCS, vol.\u00a02482, pp. 194\u2013208. Springer, Heidelberg (2003)"},{"issue":"2","key":"14_CR9","doi-asserted-by":"publisher","first-page":"292","DOI":"10.1109\/TSE.1987.233153","volume":"13","author":"C.G. Girling","year":"1987","unstructured":"Girling, C.G.: Covert Channels in LAN\u2018s. IEEE Trans. Software Eng.\u00a013(2), 292\u2013296 (1987)","journal-title":"IEEE Trans. Software Eng."},{"key":"14_CR10","unstructured":"Gligor, V.D.: A Guide to Understanding Covert Channel Analysis of Trusted Systems, \u201cThe Light Pink Book\u201d. Tech. Rep. NCSC-TG-030, U.S. National Computer Security Center (1993)"},{"key":"14_CR11","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"23","DOI":"10.1007\/3-540-61996-8_29","volume-title":"Information Hiding","author":"T.G. Handel","year":"1996","unstructured":"Handel, T.G., Sandford, M.T.: Hiding Data in the OSI Network Model. In: Anderson, R. (ed.) IH 1996. LNCS, vol.\u00a01174, pp. 23\u201338. Springer, Heidelberg (1996)"},{"key":"14_CR12","unstructured":"ISC: DHCP - Internet Systems Consortium, Inc. (2011), \n                    \n                      http:\/\/www.isc.org\/software\/dhcp\/"},{"key":"14_CR13","unstructured":"Kaminsky, D.: Tunneling Audio, Video, SSH and pretty much anything else over DNS (2004), \n                    \n                      http:\/\/www.doxpara.com\/"},{"issue":"10","key":"14_CR14","doi-asserted-by":"publisher","first-page":"613","DOI":"10.1145\/362375.362389","volume":"16","author":"B.W. Lampson","year":"1973","unstructured":"Lampson, B.W.: A Note on the Confinement Problem. Commun. ACM\u00a016(10), 613\u2013615 (1973)","journal-title":"Commun. ACM"},{"key":"14_CR15","doi-asserted-by":"publisher","first-page":"135","DOI":"10.1016\/j.adhoc.2009.04.006","volume":"8","author":"S. Li","year":"2010","unstructured":"Li, S., Ephremides, A.: Covert channels in ad-hoc wireless networks. Ad Hoc Netw.\u00a08, 135\u2013147 (2010)","journal-title":"Ad Hoc Netw."},{"key":"14_CR16","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"147","DOI":"10.1007\/11767831_10","volume-title":"Privacy Enhancing Technologies","author":"N.B. Lucena","year":"2006","unstructured":"Lucena, N.B., Lewandowski, G., Chapin, S.J.: Covert Channels in IPv6. In: Danezis, G., Martin, D. (eds.) PET 2005. LNCS, vol.\u00a03856, pp. 147\u2013166. Springer, Heidelberg (2006)"},{"key":"14_CR17","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"283","DOI":"10.1007\/978-3-540-74835-9_19","volume-title":"Computer Security \u2013 ESORICS 2007","author":"X. Luo","year":"2007","unstructured":"Luo, X., Chan, E.W.W., Chang, R.K.C.: Cloak: A Ten-Fold Way for Reliable Covert Communications. In: Biskup, J., Lopez, J. (eds.) ESORICS 2007. LNCS, vol.\u00a04734, pp. 283\u2013298. Springer, Heidelberg (2007)"},{"key":"14_CR18","unstructured":"McHugh, J.: Covert Channels Analysis: A Chapter of the Handbook for the Computer Security Certification of Trusted Systems. Technical Memorandum 5540:062A, Naval Research Laboratory, Washington, D.C. (1996), \n                    \n                      http:\/\/www.windowsecurity.com\/uplarticle\/12\/COVCHAN.pdf"},{"key":"14_CR19","doi-asserted-by":"crossref","unstructured":"Rowland, C.H.: Covert Channels in the TCP\/IP protocol suite (1996), \n                    \n                      http:\/\/www.firstmonday.org\/issues\/issue2_5\/rowland\/","DOI":"10.5210\/fm.v2i5.528"},{"key":"14_CR20","first-page":"59","volume-title":"USENIX-SS 2006: Proceedings of the 15th Conference on USENIX Security Symposium","author":"G. Shah","year":"2006","unstructured":"Shah, G., Molina, A., Blaze, M.: Keyboards and Covert Channels. In: USENIX-SS 2006: Proceedings of the 15th Conference on USENIX Security Symposium, pp. 59\u201375. USENIX Association, Berkeley (2006)"},{"key":"14_CR21","unstructured":"St\u00f8dle, D.: Ping Tunnel - Send TCP traffic over ICMP (2005), \n                    \n                      http:\/\/www.cs.uit.no\/~daniels\/PingTunnel\/"},{"key":"14_CR22","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"91","DOI":"10.1007\/3-540-51754-5_33","volume-title":"Local Area Network Security","author":"M. Wolf","year":"1989","unstructured":"Wolf, M.: Covert Channels in LAN Protocols. In: Berson, T.A., Beth, T. (eds.) LANSEC 1989. LNCS, vol.\u00a0396, pp. 91\u2013101. Springer, Heidelberg (1989)"}],"container-title":["IFIP Advances in Information and Communication Technology","Information Security and Privacy Research"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-642-30436-1_14.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,5,4]],"date-time":"2021-05-04T11:39:22Z","timestamp":1620128362000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-642-30436-1_14"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2012]]},"ISBN":["9783642304354","9783642304361"],"references-count":22,"URL":"https:\/\/doi.org\/10.1007\/978-3-642-30436-1_14","relation":{},"ISSN":["1868-4238","1861-2288"],"issn-type":[{"value":"1868-4238","type":"print"},{"value":"1861-2288","type":"electronic"}],"subject":[],"published":{"date-parts":[[2012]]}}}