{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T17:10:06Z","timestamp":1755882606225,"version":"3.44.0"},"publisher-location":"New York, NY, USA","reference-count":38,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,7,30]],"date-time":"2024-07-30T00:00:00Z","timestamp":1722297600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"SERICS - SEcurity and RIghts In the CyberSpace","award":["PE00000014"],"award-info":[{"award-number":["PE00000014"]}]},{"name":"RAISE - Robotics and AI for Socio-economic Empowerment","award":["ECS00000035"],"award-info":[{"award-number":["ECS00000035"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,7,30]]},"DOI":"10.1145\/3664476.3664493","type":"proceedings-article","created":{"date-parts":[[2024,7,25]],"date-time":"2024-07-25T12:35:50Z","timestamp":1721910950000},"page":"1-9","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["Investigating HTTP Covert Channels Through Fuzz Testing"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0002-8152-4983","authenticated-orcid":false,"given":"Kai","family":"H\u00f6lk","sequence":"first","affiliation":[{"name":"FernUniversit\u00e4t in Hagen, Germany and Warsaw University of Technology, Poland"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8509-4127","authenticated-orcid":false,"given":"Wojciech","family":"Mazurczyk","sequence":"additional","affiliation":[{"name":"FernUniversit\u00e4t in Hagen, Germany and Warsaw University of Technology, Poland"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6932-3199","authenticated-orcid":false,"given":"Marco","family":"Zuppelli","sequence":"additional","affiliation":[{"name":"Institute for Applied Mathematics and Information Technologies - National Research Council of Italy, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6466-3354","authenticated-orcid":false,"given":"Luca","family":"Caviglione","sequence":"additional","affiliation":[{"name":"Institute for Applied Mathematics and Information Technologies - National Research Council of Italy, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2024,7,30]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1109\/JSYST.2019.2912308"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2011.10.003"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/1030083.1030108"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/2909827.2930800"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSEC.2022.3178205"},{"key":"e_1_3_2_1_6_1","volume-title":"You Can\u2019t Do That On Protocols Anymore: Analysis of Covert Channels in IETF Standards","author":"Caviglione Luca","year":"2024","unstructured":"Luca Caviglione and Wojciech Mazurczyk. 2024. You Can\u2019t Do That On Protocols Anymore: Analysis of Covert Channels in IETF Standards. IEEE Network (2024)."},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2018.02.002"},{"key":"e_1_3_2_1_8_1","first-page":"111","article-title":"The Role of Social Media in Crisis Communication and Crisis Management","volume":"5","author":"Civelek Mustafa\u00a0Emre","year":"2016","unstructured":"Mustafa\u00a0Emre Civelek, Murat \u00c7emberci, and Necati\u00a0Erdem Eralp. 2016. The Role of Social Media in Crisis Communication and Crisis Management. International Journal of Research in Business & Social Science 5, 3 (2016), 111\u2013120.","journal-title":"International Journal of Research in Business & Social Science"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1109\/COMPSAC.2018.00144"},{"key":"e_1_3_2_1_10_1","volume-title":"Protocol State Fuzzing of TLS Implementations. In 24th USENIX Security Symposium (USENIX Security 15)","author":"De\u00a0Ruiter Joeri","year":"2015","unstructured":"Joeri De\u00a0Ruiter and Erik Poll. 2015. Protocol State Fuzzing of TLS Implementations. In 24th USENIX Security Symposium (USENIX Security 15). 193\u2013206."},{"key":"e_1_3_2_1_11_1","volume-title":"LLM Agents can Autonomously Hack Websites. arXiv preprint arXiv:2402.06664","author":"Fang Richard","year":"2024","unstructured":"Richard Fang, Rohan Bindu, Akul Gupta, Qiusi Zhan, and Daniel Kang. 2024. LLM Agents can Autonomously Hack Websites. arXiv preprint arXiv:2402.06664 (2024)."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"crossref","unstructured":"Roy Fielding Jim Gettys Jeffrey Mogul Henrik Frystyk Larry Masinter Paul Leach and Tim Berners-Lee. 1999. Hypertext Transfer Protocol\u2013HTTP\/1.1. Technical Report.","DOI":"10.17487\/rfc2616"},{"key":"e_1_3_2_1_13_1","volume-title":"MQTT and HTTP Protocols Using Real-time Public Smart City Data. In 2021 6th International Conference on Computer Science and Engineering. IEEE, 542\u2013547","author":"Gemirter Cavide\u00a0Balk\u0131","year":"2021","unstructured":"Cavide\u00a0Balk\u0131 Gemirter, \u00c7a\u011fatay \u015eenturca, and \u015eebnem Baydere. 2021. A Comparative Evaluation of AMQP, MQTT and HTTP Protocols Using Real-time Public Smart City Data. In 2021 6th International Conference on Computer Science and Engineering. IEEE, 542\u2013547."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.23919\/TMA.2017.8002906"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/3448300.3468255"},{"key":"e_1_3_2_1_16_1","volume-title":"Review of Covert Channels Over HTTP: Communication and Countermeasures. In 2017 IEEE Conference of Russian Young Researchers in Electrical and Electronic Engineering. IEEE, 459\u2013462","author":"Kogos G","year":"2017","unstructured":"Konstantin\u00a0G Kogos, Elena\u00a0I Seliverstova, and Anna\u00a0V Epishkina. 2017. Review of Covert Channels Over HTTP: Communication and Countermeasures. In 2017 IEEE Conference of Russian Young Researchers in Electrical and Electronic Engineering. IEEE, 459\u2013462."},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2017.2685630"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/362375.362389"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/3623375"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2014.2350994"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/3360664.3360674"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/3339252.3341493"},{"key":"e_1_3_2_1_23_1","volume-title":"Network Protocol Fuzz Testing for Information Systems and Applications: a Survey and Taxonomy. Multimedia tools and applications 75","author":"Munea Tewodros\u00a0Legesse","year":"2016","unstructured":"Tewodros\u00a0Legesse Munea, Hyunwoo Lim, and Taeshik Shon. 2016. Network Protocol Fuzz Testing for Information Systems and Applications: a Survey and Taxonomy. Multimedia tools and applications 75 (2016), 14745\u201314757."},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1007\/0-387-25660-1_20"},{"key":"e_1_3_2_1_25_1","volume-title":"Load Balancing Across Microservices. In IEEE Conference on Computer Communications. IEEE, 198\u2013206","author":"Niu Yipei","year":"2018","unstructured":"Yipei Niu, Fangming Liu, and Zongpeng Li. 2018. Load Balancing Across Microservices. In IEEE Conference on Computer Communications. IEEE, 198\u2013206."},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/3613424.3614254"},{"key":"e_1_3_2_1_27_1","volume-title":"AFLnet: A Greybox Fuzzer for Network Protocols. In 2020 IEEE 13th International Conference on Software Testing, Validation and Verification (ICST). IEEE, 460\u2013465","author":"Pham Van-Thuan","year":"2020","unstructured":"Van-Thuan Pham, Marcel B\u00f6hme, and Abhik Roychoudhury. 2020. AFLnet: A Greybox Fuzzer for Network Protocols. In 2020 IEEE 13th International Conference on Software Testing, Validation and Verification (ICST). IEEE, 460\u2013465."},{"key":"e_1_3_2_1_28_1","volume-title":"Tranco: A Research-oriented Top Sites Ranking Hardened Against Manipulation. arXiv preprint arXiv:1806.01156","author":"Pochat Victor\u00a0Le","year":"2018","unstructured":"Victor\u00a0Le Pochat, Tom Van\u00a0Goethem, Samaneh Tajalizadehkhoob, Maciej Korczy\u0144ski, and Wouter Joosen. 2018. Tranco: A Research-oriented Top Sites Ranking Hardened Against Manipulation. arXiv preprint arXiv:1806.01156 (2018)."},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2020.04.032"},{"key":"e_1_3_2_1_30_1","volume-title":"Adaptive Detection of Covert Communication in HTTP Requests. In 2011 Seventh European Conference on Computer Network Defense. IEEE, 25\u201332","author":"Schwenk Guido","year":"2011","unstructured":"Guido Schwenk and Konrad Rieck. 2011. Adaptive Detection of Covert Communication in HTTP Requests. In 2011 Seventh European Conference on Computer Network Defense. IEEE, 25\u201332."},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2017.10.019"},{"key":"e_1_3_2_1_32_1","volume-title":"The Prisoners\u2019 Problem and the Subliminal Channel. In Advances in Cryptology: Proceedings of Crypto 83","author":"Simmons J","year":"1984","unstructured":"Gustavus\u00a0J Simmons. 1984. The Prisoners\u2019 Problem and the Subliminal Channel. In Advances in Cryptology: Proceedings of Crypto 83. Springer, 51\u201367."},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978411"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/3465481.3470069"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/2684195"},{"key":"e_1_3_2_1_36_1","volume-title":"Network Reconnaissance and Vulnerability Excavation of Secure DDS Systems. In 2019 IEEE European symposium on security and privacy workshops (EUROS&PW). IEEE, 57\u201366","author":"White Ruffin","year":"2019","unstructured":"Ruffin White, Gianluca Caiazza, Chenxu Jiang, Xinyue Ou, Zhiyue Yang, Agostino Cortesi, and Henrik Christensen. 2019. Network Reconnaissance and Vulnerability Excavation of Secure DDS Systems. In 2019 IEEE European symposium on security and privacy workshops (EUROS&PW). IEEE, 57\u201366."},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/3512345"},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.011.2200744"}],"event":{"name":"ARES 2024: The 19th International Conference on Availability, Reliability and Security","acronym":"ARES 2024","location":"Vienna Austria"},"container-title":["Proceedings of the 19th International Conference on Availability, Reliability and Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3664476.3664493","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3664476.3664493","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T16:52:32Z","timestamp":1755881552000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3664476.3664493"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,7,30]]},"references-count":38,"alternative-id":["10.1145\/3664476.3664493","10.1145\/3664476"],"URL":"https:\/\/doi.org\/10.1145\/3664476.3664493","relation":{},"subject":[],"published":{"date-parts":[[2024,7,30]]},"assertion":[{"value":"2024-07-30","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}