{"id":"https://openalex.org/W4408402324","doi":"https://doi.org/10.1109/menacomm62946.2025.10911039","title":"Securing Networks Against ICMP Covert Channels: Detection and Countermeasures","display_name":"Securing Networks Against ICMP Covert Channels: Detection and Countermeasures","publication_year":2025,"publication_date":"2025-02-20","ids":{"openalex":"https://openalex.org/W4408402324","doi":"https://doi.org/10.1109/menacomm62946.2025.10911039"},"language":"en","primary_location":{"id":"doi:10.1109/menacomm62946.2025.10911039","is_oa":false,"landing_page_url":"https://doi.org/10.1109/menacomm62946.2025.10911039","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 5th IEEE Middle East and North Africa Communications Conference (MENACOMM)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5116608653","display_name":"Giovanni Kaddissi","orcid":null},"institutions":[{"id":"https://openalex.org/I4210090878","display_name":"Arab Open University","ror":"https://ror.org/00d260p98","country_code":"LB","type":"education","lineage":["https://openalex.org/I4210090878","https://openalex.org/I4210093932"]}],"countries":["LB"],"is_corresponding":false,"raw_author_name":"Giovanni Kaddissi","raw_affiliation_strings":["Arab Open University,Cybersecurity and Forensics Department,Beirut,Lebanon"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Arab Open University,Cybersecurity and Forensics Department,Beirut,Lebanon","institution_ids":["https://openalex.org/I4210090878"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5066016612","display_name":"Makram W. Hatoum","orcid":"https://orcid.org/0000-0002-4729-3547"},"institutions":[{"id":"https://openalex.org/I4210090878","display_name":"Arab Open University","ror":"https://ror.org/00d260p98","country_code":"LB","type":"education","lineage":["https://openalex.org/I4210090878","https://openalex.org/I4210093932"]}],"countries":["LB"],"is_corresponding":false,"raw_author_name":"Makram W. Hatoum","raw_affiliation_strings":["Arab Open University,Cybersecurity and Forensics Department,Beirut,Lebanon"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Arab Open University,Cybersecurity and Forensics Department,Beirut,Lebanon","institution_ids":["https://openalex.org/I4210090878"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059047296","display_name":"Khouloud Samrouth","orcid":"https://orcid.org/0000-0003-2696-2024"},"institutions":[{"id":"https://openalex.org/I4210090878","display_name":"Arab Open University","ror":"https://ror.org/00d260p98","country_code":"LB","type":"education","lineage":["https://openalex.org/I4210090878","https://openalex.org/I4210093932"]}],"countries":["LB"],"is_corresponding":false,"raw_author_name":"Khouloud Samrouth","raw_affiliation_strings":["Arab Open University,Cybersecurity and Forensics Department,Beirut,Lebanon"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Arab Open University,Cybersecurity and Forensics Department,Beirut,Lebanon","institution_ids":["https://openalex.org/I4210090878"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5041444031","display_name":"Ali El Attar","orcid":null},"institutions":[{"id":"https://openalex.org/I4210090878","display_name":"Arab Open University","ror":"https://ror.org/00d260p98","country_code":"LB","type":"education","lineage":["https://openalex.org/I4210090878","https://openalex.org/I4210093932"]}],"countries":["LB"],"is_corresponding":false,"raw_author_name":"Ali El Attar","raw_affiliation_strings":["Arab Open University,Cybersecurity and Forensics Department,Beirut,Lebanon"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Arab Open University,Cybersecurity and Forensics Department,Beirut,Lebanon","institution_ids":["https://openalex.org/I4210090878"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I4210090878"],"apc_list":null,"apc_paid":null,"fwci":3.3016,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.91555271,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":91,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9896000027656555,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9886999726295471,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/internet-control-message-protocol","display_name":"Internet Control Message Protocol","score":0.8533048629760742},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7057050466537476},{"id":"https://openalex.org/keywords/covert","display_name":"Covert","score":0.6418326497077942},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5518589019775391},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.3276328146457672}],"concepts":[{"id":"https://openalex.org/C195219913","wikidata":"https://www.wikidata.org/wiki/Q13162","display_name":"Internet Control Message Protocol","level":3,"score":0.8533048629760742},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7057050466537476},{"id":"https://openalex.org/C2779338814","wikidata":"https://www.wikidata.org/wiki/Q5179285","display_name":"Covert","level":2,"score":0.6418326497077942},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5518589019775391},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3276328146457672},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/menacomm62946.2025.10911039","is_oa":false,"landing_page_url":"https://doi.org/10.1109/menacomm62946.2025.10911039","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 5th IEEE Middle East and North Africa Communications Conference (MENACOMM)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":14,"referenced_works":["https://openalex.org/W1558514591","https://openalex.org/W1892482514","https://openalex.org/W2060626729","https://openalex.org/W2131043647","https://openalex.org/W2164808023","https://openalex.org/W2564746633","https://openalex.org/W2766428736","https://openalex.org/W2794236215","https://openalex.org/W2963379686","https://openalex.org/W3118559485","https://openalex.org/W3197379162","https://openalex.org/W6606318847","https://openalex.org/W6743129358","https://openalex.org/W6993024055"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2392196971","https://openalex.org/W2504080848","https://openalex.org/W2354256422","https://openalex.org/W2385660420","https://openalex.org/W1578823772","https://openalex.org/W2523525694","https://openalex.org/W4210390481"],"abstract_inverted_index":{"Data":[0],"exfiltration":[1,104],"remains":[2],"a":[3,57,83],"major":[4],"challenge":[5],"in":[6,108,147],"cybersecurity,":[7],"with":[8],"adversaries":[9],"continuously":[10],"devising":[11],"innovative":[12],"methods":[13],"to":[14,47,62],"extract":[15],"confidential":[16],"information":[17],"from":[18,136],"targeted":[19],"systems":[20],"stealthily.":[21],"This":[22],"research":[23],"provides":[24],"an":[25],"in-depth":[26],"examination":[27],"of":[28,116,124,142],"various":[29],"techniques":[30],"used":[31],"for":[32,64,85],"unauthorized":[33],"data":[34,66,86,103],"transfers,":[35],"focusing":[36],"particularly":[37],"on":[38],"covert":[39,65,102,117,149],"channels":[40],"within":[41],"the":[42,51,91,140,143],"TCP/IP":[43],"protocol":[44,60],"suite.":[45],"Central":[46],"our":[48,137],"investigation":[49],"is":[50],"Internet":[52],"Control":[53],"Message":[54],"Protocol":[55],"(ICMP),":[56],"commonly":[58],"underestimated":[59],"vulnerable":[61],"misuse":[63],"extraction.":[67],"By":[68],"analyzing":[69,120],"real-world":[70],"incidents":[71],"and":[72,131],"experimental":[73],"simulations,":[74],"we":[75],"demonstrate":[76],"how":[77],"ICMP":[78,92,106,125,129,132,144],"can":[79],"be":[80],"exploited":[81],"as":[82],"conduit":[84],"breaches.":[87],"Our":[88,110],"study":[89],"introduces":[90],"Covert":[93],"Channel":[94],"Ranking":[95],"System":[96],"(ICMP":[97],"C2RS)":[98],"model,":[99],"which":[100],"detects":[101],"through":[105],"packets":[107],"real-time.":[109],"model":[111,146],"effectively":[112],"uncovers":[113],"anomalies":[114],"indicative":[115],"communication":[118],"by":[119],"three":[121],"key":[122],"sections":[123],"packets\u2014the":[126],"IP":[127],"header,":[128,130],"payload.":[133],"The":[134],"findings":[135],"simulations":[138],"validate":[139],"efficacy":[141],"C2RS":[145],"identifying":[148],"channels.":[150]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1}],"updated_date":"2026-06-26T08:34:08.712188","created_date":"2025-10-10T00:00:00"}