{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,29]],"date-time":"2026-04-29T18:16:45Z","timestamp":1777486605871,"version":"3.51.4"},"reference-count":24,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,2,20]],"date-time":"2025-02-20T00:00:00Z","timestamp":1740009600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,2,20]],"date-time":"2025-02-20T00:00:00Z","timestamp":1740009600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,2,20]]},"DOI":"10.1109\/menacomm62946.2025.10911039","type":"proceedings-article","created":{"date-parts":[[2025,3,13]],"date-time":"2025-03-13T17:31:39Z","timestamp":1741887099000},"page":"1-8","source":"Crossref","is-referenced-by-count":2,"title":["Securing Networks Against ICMP Covert Channels: Detection and Countermeasures"],"prefix":"10.1109","author":[{"given":"Giovanni","family":"Kaddissi","sequence":"first","affiliation":[{"name":"Arab Open University,Cybersecurity and Forensics Department,Beirut,Lebanon"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Makram W.","family":"Hatoum","sequence":"additional","affiliation":[{"name":"Arab Open University,Cybersecurity and Forensics Department,Beirut,Lebanon"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Khouloud","family":"Samrouth","sequence":"additional","affiliation":[{"name":"Arab Open University,Cybersecurity and Forensics Department,Beirut,Lebanon"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ali","family":"El Attar","sequence":"additional","affiliation":[{"name":"Arab Open University,Cybersecurity and Forensics Department,Beirut,Lebanon"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2017.10.016"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.35444\/IJANA.2020.12302"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2018.09.006"},{"key":"ref4","volume-title":"Cost of a data breach","year":"2024"},{"key":"ref5","first-page":"1","article-title":"Design and implementation of an active warden addressing protocol switching covert channels","volume-title":"Proc. 7th International Conference on Internet Monitoring and Protection (ICIMP 2012)","author":"Wendzel"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/HICSS.2011.201"},{"key":"ref7","article-title":"Network covert channels: Review of current state and analysis of viability of the use of x. 509 certificates for covert communications","volume-title":"Tech. Rep","author":"Scott","year":"2008"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.5210\/fm.v2i5.528"},{"key":"ref9","article-title":"Dns as a covert channel within protected networks","volume":"2011","author":"Bromberger","year":"2011","journal-title":"National Electronic Sector Cyber Security Organization (NESCO)"},{"key":"ref10","first-page":"1","article-title":"An overview of image steganography","volume":"1","author":"Morkel","year":"2005","journal-title":"ISSA"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/CSR51186.2021.9527962"},{"key":"ref12","volume-title":"Internet protocol - darpa internet program protocol specification","author":"Postel","year":"1981"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/ICECS.2008.4674998"},{"key":"ref14","volume-title":"Icmp protocol with wireshark","author":"Belding","year":"2020"},{"key":"ref15","volume-title":"ptunnel - ping tunnel","author":"St\u00f8dle","year":"2005"},{"key":"ref16","volume-title":"Covert channels","author":"Smeets","year":"2006"},{"key":"ref17","article-title":"How hackers use icmp tunneling to own your network","volume-title":"Cynet AutoXDR","author":"Grinberg","year":"2019"},{"key":"ref18","article-title":"Project loki: Icmp tunneling","author":"Daemon","year":"1966","journal-title":"Phrack Magazine"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/MILCOM.2016.7795379"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/AICCSA.2017.60"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-39737-3_103"},{"key":"ref22","volume-title":"Covert channel detection using flow-data","author":"Reyes","year":"2014"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2015.88"},{"key":"ref24","article-title":"C2rs model","author":"Kaddissi","year":"2024"}],"event":{"name":"2025 5th IEEE Middle East and North Africa Communications Conference (MENACOMM)","location":"Byblos, Lebanon","start":{"date-parts":[[2025,2,20]]},"end":{"date-parts":[[2025,2,22]]}},"container-title":["2025 5th IEEE Middle East and North Africa Communications Conference (MENACOMM)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/10910941\/10910950\/10911039.pdf?arnumber=10911039","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,3,27]],"date-time":"2025-03-27T00:38:02Z","timestamp":1743035882000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10911039\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,2,20]]},"references-count":24,"URL":"https:\/\/doi.org\/10.1109\/menacomm62946.2025.10911039","relation":{},"subject":[],"published":{"date-parts":[[2025,2,20]]}}}