Home // EMERGING 2011 , The Third International Conference on Emerging Network Intelligence // View article

A MAC Layer Covert Channel in 802.11 Networks

Authors:
Ricardo Gonçalves
Murali Tummala
John McEachen

Keywords: IEEE802.11 MAC frame; frame forging; covert channel; protocol version

Abstract:
Covert channels in modern communication networks are a source of security concerns. Such channels can be used to conduct hidden communications, facilitate command and control of botnets or inject malicious contents into unsuspected end user devices or network nodes. The vast majority of the documented covert channels make use of the upper layers of the OSI model. In this work, we present a proof of concept on a new covert channel in IEEE 802.11 networks, making use of the Protocol Version field in the MAC header. This is achieved by forging modified CTS and ACK frames. Forward error correction mechanisms and interleaving were implemented to increase the proposed channel's robustness to error. A laboratory implementation of the proposed channel and the results of tests conducted on the proposed channel, including measurements of channel errors and available data rate for transmission, are presented. The results validate the viability of the proposed covert channel and demonstrate that robustness of the channel to frame errors can be improved by using well known forward error correction and interleaving techniques.

Pages: 88 to 93

Copyright: Copyright (c) The Government of USA, 2011. Used by permission to IARIA.

Publication date: November 20, 2011

Published in: conference

ISSN: 2326-9383

ISBN: 978-1-61208-174-8

Location: Lisbon, Portugal

Dates: from November 20, 2011 to November 25, 2011