{"id":"https://openalex.org/W2967841396","doi":"https://doi.org/10.1145/3339252.3341477","title":"Protocol-independent Detection of \"Messaging Ordering\" Network Covert Channels","display_name":"Protocol-independent Detection of \"Messaging Ordering\" Network Covert Channels","publication_year":2019,"publication_date":"2019-08-09","ids":{"openalex":"https://openalex.org/W2967841396","doi":"https://doi.org/10.1145/3339252.3341477","mag":"2967841396"},"language":"en","primary_location":{"id":"doi:10.1145/3339252.3341477","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3339252.3341477","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 14th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"},"type":"article","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2103.00499","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5072118587","display_name":"Steffen Wendzel","orcid":"https://orcid.org/0000-0002-1913-5912"},"institutions":[{"id":"https://openalex.org/I4210166245","display_name":"Fraunhofer Institute for Communication, Information Processing and Ergonomics","ror":"https://ror.org/05nn0gw40","country_code":"DE","type":"facility","lineage":["https://openalex.org/I4210166245","https://openalex.org/I4923324"]},{"id":"https://openalex.org/I151001649","display_name":"University of Applied Sciences Worms","ror":"https://ror.org/031ph8d53","country_code":"DE","type":"education","lineage":["https://openalex.org/I151001649"]}],"countries":["DE"],"is_corresponding":true,"raw_author_name":"Steffen Wendzel","raw_affiliation_strings":["Worms University of Applied Science, Centre of Technology and Transfer (ZTT), Worms, Germany, Fraunhofer FKIE, Department of Cyber Security, Bonn, Germany"],"affiliations":[{"raw_affiliation_string":"Worms University of Applied Science, Centre of Technology and Transfer (ZTT), Worms, Germany, Fraunhofer FKIE, Department of Cyber Security, Bonn, Germany","institution_ids":["https://openalex.org/I151001649","https://openalex.org/I4210166245"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5072118587"],"corresponding_institution_ids":["https://openalex.org/I151001649","https://openalex.org/I4210166245"],"apc_list":null,"apc_paid":null,"fwci":0.1447,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.57633676,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":93},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.994700014591217,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7790883779525757},{"id":"https://openalex.org/keywords/header","display_name":"Header","score":0.7651997804641724},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.7589502334594727},{"id":"https://openalex.org/keywords/covert-channel","display_name":"Covert channel","score":0.7524897456169128},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.6334749460220337},{"id":"https://openalex.org/keywords/channel","display_name":"Channel (broadcasting)","score":0.5737817287445068},{"id":"https://openalex.org/keywords/covert","display_name":"Covert","score":0.5700905919075012},{"id":"https://openalex.org/keywords/encode","display_name":"ENCODE","score":0.5519140958786011},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.5278584361076355}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7790883779525757},{"id":"https://openalex.org/C48105269","wikidata":"https://www.wikidata.org/wiki/Q1141160","display_name":"Header","level":2,"score":0.7651997804641724},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.7589502334594727},{"id":"https://openalex.org/C29024540","wikidata":"https://www.wikidata.org/wiki/Q1476964","display_name":"Covert channel","level":5,"score":0.7524897456169128},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.6334749460220337},{"id":"https://openalex.org/C127162648","wikidata":"https://www.wikidata.org/wiki/Q16858953","display_name":"Channel (broadcasting)","level":2,"score":0.5737817287445068},{"id":"https://openalex.org/C2779338814","wikidata":"https://www.wikidata.org/wiki/Q5179285","display_name":"Covert","level":2,"score":0.5700905919075012},{"id":"https://openalex.org/C66746571","wikidata":"https://www.wikidata.org/wiki/Q1134833","display_name":"ENCODE","level":3,"score":0.5519140958786011},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.5278584361076355},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0},{"id":"https://openalex.org/C142724271","wikidata":"https://www.wikidata.org/wiki/Q7208","display_name":"Pathology","level":1,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C204787440","wikidata":"https://www.wikidata.org/wiki/Q188504","display_name":"Alternative medicine","level":2,"score":0.0}],"mesh":[],"locations_count":5,"locations":[{"id":"doi:10.1145/3339252.3341477","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3339252.3341477","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 14th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2103.00499","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2103.00499","pdf_url":"https://arxiv.org/pdf/2103.00499","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"pmh:oai:fraunhofer.de:N-624874","is_oa":false,"landing_page_url":"http://publica.fraunhofer.de/documents/N-624874.html","pdf_url":null,"source":{"id":"https://openalex.org/S4306400801","display_name":"Publikationsdatenbank der Fraunhofer-Gesellschaft (Fraunhofer-Gesellschaft)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4923324","host_organization_name":"Fraunhofer-Gesellschaft","host_organization_lineage":["https://openalex.org/I4923324"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Fraunhofer FKIE","raw_type":"Conference Paper"},{"id":"pmh:oai:publica.fraunhofer.de:publica/410121","is_oa":false,"landing_page_url":"https://publica.fraunhofer.de/handle/publica/410121","pdf_url":null,"source":{"id":"https://openalex.org/S4306400318","display_name":"Fraunhofer-Publica (Fraunhofer-Gesellschaft)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4923324","host_organization_name":"Fraunhofer-Gesellschaft","host_organization_lineage":["https://openalex.org/I4923324"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"conference paper"},{"id":"pmh:oai:zenodo.org:4618116","is_oa":true,"landing_page_url":"https://zenodo.org/record/4618116","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"info:eu-repo/semantics/conferencePaper"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2103.00499","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2103.00499","pdf_url":"https://arxiv.org/pdf/2103.00499","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.699999988079071}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":19,"referenced_works":["https://openalex.org/W49546894","https://openalex.org/W1507136297","https://openalex.org/W1548231900","https://openalex.org/W1553177637","https://openalex.org/W1981844530","https://openalex.org/W1993704367","https://openalex.org/W2011224223","https://openalex.org/W2032268986","https://openalex.org/W2076003763","https://openalex.org/W2120467192","https://openalex.org/W2151185692","https://openalex.org/W2887451643","https://openalex.org/W2892573581","https://openalex.org/W2898206736","https://openalex.org/W2899134074","https://openalex.org/W2913153438","https://openalex.org/W2939175835","https://openalex.org/W3103457769","https://openalex.org/W4254812591"],"related_works":["https://openalex.org/W2409612194","https://openalex.org/W4224042389","https://openalex.org/W2988433590","https://openalex.org/W20460883","https://openalex.org/W174282171","https://openalex.org/W2891706772","https://openalex.org/W2144804944","https://openalex.org/W2364035247","https://openalex.org/W1587013156","https://openalex.org/W2147492318"],"abstract_inverted_index":{"Detection":[0],"methods":[1],"are":[2],"available":[3],"for":[4],"several":[5],"known":[6],"covert":[7,13,30],"channels.":[8],"However,":[9],"a":[10,29,82],"type":[11],"of":[12,35,52],"channel":[14,31],"that":[15,56,79],"received":[16],"little":[17],"attention":[18],"within":[19],"the":[20,24,33,44],"last":[21],"decade":[22],"is":[23,55],"\"message":[25],"ordering\"":[26],"channel.":[27],"Such":[28],"changes":[32],"order":[34,84],"PDUs":[36],"(protocol":[37],"data":[38],"units,":[39],"i.e.":[40],"packets)":[41],"transferred":[42],"over":[43],"network":[45,73],"to":[46],"encode":[47],"hidden":[48],"information.":[49],"The":[50],"advantage":[51],"these":[53],"channels":[54],"they":[57,63,86],"cannot":[58],"be":[59],"blocked":[60],"easily":[61],"as":[62,76],"do":[64],"not":[65],"modify":[66],"header":[67],"content":[68],"but":[69],"instead":[70],"mimic":[71],"typical":[72],"behavior":[74],"such":[75],"TCP":[77],"segments":[78],"arrive":[80],"in":[81],"different":[83],"than":[85],"were":[87],"sent.":[88]},"counts_by_year":[{"year":2021,"cited_by_count":1}],"updated_date":"2026-03-20T23:20:44.827607","created_date":"2025-10-10T00:00:00"}