{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,28]],"date-time":"2025-10-28T18:31:15Z","timestamp":1761676275538,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":28,"publisher":"ACM","license":[{"start":{"date-parts":[[2015,6,17]],"date-time":"2015-06-17T00:00:00Z","timestamp":1434499200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2015,6,17]]},"DOI":"10.1145\/2756601.2756605","type":"proceedings-article","created":{"date-parts":[[2015,6,2]],"date-time":"2015-06-02T18:40:11Z","timestamp":1433270411000},"page":"55-64","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":1,"title":["LiHB"],"prefix":"10.1145","author":[{"given":"Yao","family":"Shen","sequence":"first","affiliation":[{"name":"University of Science and Technology of China, Hefei, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Liusheng","family":"Huang","sequence":"additional","affiliation":[{"name":"University of Science and Technology of China, Hefei, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Fei","family":"Wang","sequence":"additional","affiliation":[{"name":"Purdue University, West Lafayette, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xiaorong","family":"Lu","sequence":"additional","affiliation":[{"name":"University of Science and Technology of China, Hefei, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Wei","family":"Yang","sequence":"additional","affiliation":[{"name":"University of Science and Technology of China, Hefei, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Lu","family":"Li","sequence":"additional","affiliation":[{"name":"University of Science and Technology of China, Hefei, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2015,6,17]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/1005140.1005152"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1145\/1030083.1030100"},{"key":"e_1_3_2_1_3_1","volume-title":"Proc. 5th Intern. Conf. Information Warfare and Security","author":"Brown E.","year":"2010","unstructured":"E. Brown , B. Yuan , D. Johnson , and P. Lutz . Covert channels in the http network protocol: Channel characterization and detecting man-in-the-middle attacks . In Proc. 5th Intern. Conf. Information Warfare and Security . Ohio, USA, pages 56--65 , 2010 . E. Brown, B. Yuan, D. Johnson, and P. Lutz. Covert channels in the http network protocol: Channel characterization and detecting man-in-the-middle attacks. In Proc. 5th Intern. Conf. Information Warfare and Security. Ohio, USA, pages 56--65, 2010."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/1030083.1030108"},{"key":"e_1_3_2_1_5_1","volume-title":"Novembro","author":"Castro S.","year":"2003","unstructured":"S. Castro . Covert channel and tunneling over the http protocol detection: Gw implementation theoretical design. Gray World. net Team , Novembro , 2003 . S. Castro. Covert channel and tunneling over the http protocol detection: Gw implementation theoretical design. Gray World. net Team, Novembro, 2003."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/1198255.1198257"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2008.09.010"},{"volume-title":"USA","author":"Dyatlov A.","key":"e_1_3_2_1_8_1","unstructured":"A. Dyatlov and S. Castro . Exploitation of data streams authorized by a network access control system for arbitrary data transfers: tunneling and covert channels over the http protocol. Grayworld , USA , http:\/\/grayworld.net\/projects\/papers\/html\/covert_paper.html, 2003. A. Dyatlov and S. Castro. Exploitation of data streams authorized by a network access control system for arbitrary data transfers: tunneling and covert channels over the http protocol. Grayworld, USA, http:\/\/grayworld.net\/projects\/papers\/html\/covert_paper.html, 2003."},{"key":"e_1_3_2_1_9_1","first-page":"1631","article-title":"The ip network address translator (nat). Technical report","author":"Egevang K.","year":"1994","unstructured":"K. Egevang and P. Francis . The ip network address translator (nat). Technical report , RFC 1631 , 1994 . K. Egevang and P. Francis. The ip network address translator (nat). Technical report, RFC 1631, 1994.","journal-title":"RFC"},{"key":"e_1_3_2_1_10_1","volume-title":"Hypertext transfer protocol--http\/1.1","author":"Fielding R.","year":"1999","unstructured":"R. Fielding , J. Gettys , J. Mogul , H. Frystyk , L. Masinter , P. Leach , and T. Berners-Lee . Hypertext transfer protocol--http\/1.1 , 1999 . R. Fielding, J. Gettys, J. Mogul, H. Frystyk, L. Masinter, P. Leach, and T. Berners-Lee. Hypertext transfer protocol--http\/1.1, 1999."},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1007\/11560326_34"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/1315245.1315284"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2010.46"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-87403-4_12"},{"key":"e_1_3_2_1_15_1","volume-title":"HTTP: the definitive guide","author":"Gourley D.","year":"2002","unstructured":"D. Gourley and B. Totty . HTTP: the definitive guide . O'Reilly Media, Inc. , 2002 . D. Gourley and B. Totty. HTTP: the definitive guide. O'Reilly Media, Inc., 2002."},{"key":"e_1_3_2_1_16_1","volume-title":"Combinatorial algorithms: generation, enumeration, and search","author":"Kreher D. L.","year":"1998","unstructured":"D. L. Kreher and D. R. Stinson . Combinatorial algorithms: generation, enumeration, and search , volume 7 . CRC press , 1998 . D. L. Kreher and D. R. Stinson. Combinatorial algorithms: generation, enumeration, and search, volume 7. CRC press, 1998."},{"key":"e_1_3_2_1_18_1","first-page":"120","volume-title":"Computer Security--ESORICS","author":"Liu Y.","year":"2009","unstructured":"Y. Liu , D. Ghosal , F. Armknecht , A.-R. Sadeghi , S. Schulz , and S. Katzenbeisser . Hide and seek in time-robust covert timing channels . In Computer Security--ESORICS , pages 120 -- 135 . Springer , 2009 . Y. Liu, D. Ghosal, F. Armknecht, A.-R. Sadeghi, S. Schulz, and S. Katzenbeisser. Hide and seek in time-robust covert timing channels. In Computer Security--ESORICS, pages 120--135. Springer, 2009."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.5555\/1929304.1929319"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.5555\/2393847.2393873"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2012.64"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2011.5958260"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/5.771065"},{"key":"e_1_3_2_1_24_1","volume-title":"May","author":"NA.","year":"2014","unstructured":"SI NA. Sina homepage. http:\/\/www.sina.com.cn\/ , May 2014 . SINA. Sina homepage. http:\/\/www.sina.com.cn\/, May 2014."},{"key":"e_1_3_2_1_25_1","volume-title":"Ip network address translator (nat) terminology and considerations","author":"Srisuresh P.","year":"1999","unstructured":"P. Srisuresh and M. Holdrege . Ip network address translator (nat) terminology and considerations . 1999 . P. Srisuresh and M. Holdrege. Ip network address translator (nat) terminology and considerations. 1999."},{"key":"e_1_3_2_1_26_1","series-title":"cambridge studies in advanced mathematics","doi-asserted-by":"crossref","DOI":"10.1017\/CBO9780511609589","volume-title":"Enumerative combinatorics","author":"Stanley R. P.","year":"1999","unstructured":"R. P. Stanley . Enumerative combinatorics . vol. 2, volume 62 of cambridge studies in advanced mathematics , 1999 . R. P. Stanley. Enumerative combinatorics. vol. 2, volume 62 of cambridge studies in advanced mathematics, 1999."},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1002\/sec.822"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/1022594.1022597"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2007.4317620"}],"event":{"name":"IH&MMSec '15: ACM Information Hiding and Multimedia Security Workshop","sponsor":["SIGMM ACM Special Interest Group on Multimedia"],"location":"Portland Oregon USA","acronym":"IH&MMSec '15"},"container-title":["Proceedings of the 3rd ACM Workshop on Information Hiding and Multimedia Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2756601.2756605","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2756601.2756605","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T06:12:27Z","timestamp":1750227147000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2756601.2756605"}},"subtitle":["Lost in HTTP Behaviors - A Behavior-Based Covert Channel in HTTP"],"short-title":[],"issued":{"date-parts":[[2015,6,17]]},"references-count":28,"alternative-id":["10.1145\/2756601.2756605","10.1145\/2756601"],"URL":"https:\/\/doi.org\/10.1145\/2756601.2756605","relation":{},"subject":[],"published":{"date-parts":[[2015,6,17]]},"assertion":[{"value":"2015-06-17","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}