Network Covert Channel Detection with Cluster based on Hierarchy and Density

AbstractIn order to solve the problem one detection algorithm can only detect one kind of network covert channel, The detection approach hierarchical and density based cluster was purposed. Because the coding scheme of the covert channel would cause many similar data occurred repeatedly, the detection algorithm cluster based on density can be used to detect several kinds of the covert channels. Moreover, the detection approach cluster based on hierarchy and density is able to tackle of detection a noisy channel. Several detection tests were conducted, the detection results show that the algorithm can work well to distinguish the covert channel from normal network traffic even the noise level was about 20%