{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,25]],"date-time":"2026-04-25T14:48:57Z","timestamp":1777128537813,"version":"3.51.4"},"reference-count":15,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2007,11]]},"DOI":"10.1109\/icon.2007.4444059","type":"proceedings-article","created":{"date-parts":[[2008,1,29]],"date-time":"2008-01-29T23:54:22Z","timestamp":1201650862000},"page":"42-47","source":"Crossref","is-referenced-by-count":16,"title":["An Empirical Evaluation of IP Time To Live Covert Channels"],"prefix":"10.1109","author":[{"given":"Sebastian","family":"Zander","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Grenville","family":"Armitage","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Philip","family":"Branch","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref10","first-page":"51","article-title":"The Prisoners' Problem and the Subliminal Channel","author":"simmons","year":"1983","journal-title":"Proceedings of Advances in Cryptology (CRYPTO)"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/948109.948116"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1002\/0471200611"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/TIT.1955.1055138"},{"key":"ref14","article-title":"CCHEF - Covert Channels Evaluation Framework","author":"zander","year":"2007"},{"key":"ref15","article-title":"Netfilter Queue Library","author":"welte","year":"0"},{"key":"ref4","article-title":"Deception on the Network: Thinking Differently About Covert Channels","author":"van horenbeeck","year":"2006","journal-title":"7th Australian Information Warfare and Security Conference"},{"key":"ref3","article-title":"Eliminating Steganography in Internet Traffic with Active Wardens","author":"fisk","year":"2002","journal-title":"Proceedings of 5th International Workshop on Information Hiding"},{"key":"ref6","first-page":"189","article-title":"A Typical Noisy Covert Channel in the IP Protocol","author":"qu","year":"2004","journal-title":"Proc 38th Ann Int'l Carnahan Conf Security Technology"},{"key":"ref5","article-title":"Internet Protocol","author":"postel","year":"1981","journal-title":"RFC 0791"},{"key":"ref8","article-title":"Covert Channels in the IP Time To Live Field","author":"zander","year":"2006","journal-title":"Proceedings of Australian Telecommunication Networks and Applications Conference (ATNAC)"},{"key":"ref7","first-page":"147","article-title":"Covert Channels in IPv6","author":"lucena","year":"2005","journal-title":"Proceedings of Privacy Enhancing Technologies (PET)"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2007.4317620"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/362375.362389"},{"key":"ref9","article-title":"Dynamics of the IP Time To Live Field in Internet Traffic Flows","author":"zander","year":"2007","journal-title":"Tech Rep 070529A CAIA Technical Report"}],"event":{"name":"2007 15th IEEE International Conference on Networks","location":"Adelaide, Australia","start":{"date-parts":[[2007,11,19]]},"end":{"date-parts":[[2007,11,21]]}},"container-title":["2007 15th IEEE International Conference on Networks"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx5\/4444030\/4444031\/04444059.pdf?arnumber=4444059","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,3,16]],"date-time":"2017-03-16T22:56:54Z","timestamp":1489705014000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/4444059\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2007,11]]},"references-count":15,"URL":"https:\/\/doi.org\/10.1109\/icon.2007.4444059","relation":{},"ISSN":["1556-6463"],"issn-type":[{"value":"1556-6463","type":"print"}],"subject":[],"published":{"date-parts":[[2007,11]]}}}