{"id":"https://openalex.org/W7164360088","doi":"https://doi.org/10.48550/arxiv.2606.11532","title":"Hiding the Trees in the Forest: Building Network Covert Channels with Hash-Based Covert Carrier Filtering","display_name":"Hiding the Trees in the Forest: Building Network Covert Channels with Hash-Based Covert Carrier Filtering","publication_year":2026,"publication_date":"2026-06-10","ids":{"openalex":"https://openalex.org/W7164360088","doi":"https://doi.org/10.48550/arxiv.2606.11532"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.11532","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.11532","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.11532","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5088214032","display_name":"Zexiao Zou","orcid":"https://orcid.org/0009-0008-9444-9816"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zou, Zexiao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138477478","display_name":"Zhiqiang Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Zhiqiang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138420123","display_name":"Baoxu Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Baoxu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138363587","display_name":"Yuyang Han","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Han, Yuyang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5138439775","display_name":"Yan (Rockee) Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Yan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9926000237464905,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9926000237464905,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12131","display_name":"Wireless Signal Modulation Classification","score":0.000699999975040555,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.0006000000284984708,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/covert","display_name":"Covert","score":0.8679999709129333},{"id":"https://openalex.org/keywords/covert-channel","display_name":"Covert channel","score":0.8407999873161316},{"id":"https://openalex.org/keywords/secrecy","display_name":"Secrecy","score":0.6567000150680542},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.5263000130653381},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4578999876976013},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.45739999413490295},{"id":"https://openalex.org/keywords/channel","display_name":"Channel (broadcasting)","score":0.3882000148296356}],"concepts":[{"id":"https://openalex.org/C2779338814","wikidata":"https://www.wikidata.org/wiki/Q5179285","display_name":"Covert","level":2,"score":0.8679999709129333},{"id":"https://openalex.org/C29024540","wikidata":"https://www.wikidata.org/wiki/Q1476964","display_name":"Covert channel","level":5,"score":0.8407999873161316},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6948999762535095},{"id":"https://openalex.org/C2776452267","wikidata":"https://www.wikidata.org/wiki/Q1503443","display_name":"Secrecy","level":2,"score":0.6567000150680542},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.5867999792098999},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.5263000130653381},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4578999876976013},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.45739999413490295},{"id":"https://openalex.org/C127162648","wikidata":"https://www.wikidata.org/wiki/Q16858953","display_name":"Channel (broadcasting)","level":2,"score":0.3882000148296356},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.3668000102043152},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.36239999532699585},{"id":"https://openalex.org/C3073032","wikidata":"https://www.wikidata.org/wiki/Q15912075","display_name":"Information hiding","level":3,"score":0.35690000653266907},{"id":"https://openalex.org/C125112378","wikidata":"https://www.wikidata.org/wiki/Q176640","display_name":"Randomness","level":2,"score":0.35580000281333923},{"id":"https://openalex.org/C106131492","wikidata":"https://www.wikidata.org/wiki/Q3072260","display_name":"Filter (signal processing)","level":2,"score":0.321399986743927},{"id":"https://openalex.org/C2776257435","wikidata":"https://www.wikidata.org/wiki/Q1576430","display_name":"Bandwidth (computing)","level":2,"score":0.27570000290870667},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.2721000015735626},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.2614000141620636},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.2515999972820282}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.11532","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.11532","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.11532","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.11532","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.5996301174163818,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"As":[0],"an":[1],"effective":[2],"anti-censorship":[3],"mechanism,":[4],"network":[5,22,58,97,139,164,167,187,233],"covert":[6,23,32,59,75,98,118,140,165,171,188],"channels":[7,24],"can":[8,61],"provide":[9],"data":[10],"privacy":[11],"protection":[12],"and":[13,106,169],"ensure":[14],"communication":[15],"security.":[16],"However,":[17],"the":[18,28,35,43,53,57,81,93,96,101,113,117,126,135,138,143,146,158,178,183,191,198,201,205,211,224,228],"covertness":[19,136],"of":[20,30,38,45,95,128,137,145,163,186,204,226],"existing":[21],"primarily":[25],"depends":[26],"on":[27,80,200],"secrecy":[29],"their":[31],"algorithms.":[33],"With":[34],"increasing":[36],"depth":[37],"research":[39],"in":[40,160,231],"this":[41,69,71,84],"field,":[42],"difficulty":[44],"breaking":[46],"such":[47],"algorithms":[48],"has":[49],"gradually":[50],"decreased.":[51],"Once":[52],"algorithm":[54],"is":[55,90,218],"exposed,":[56],"channel":[60,141],"be":[62],"easily":[63],"detected":[64],"by":[65],"adversaries.":[66],"To":[67],"address":[68],"issue,":[70],"paper":[72],"proposes":[73],"a":[74,86,109,215],"carrier":[76,114,119,129],"filtering":[77,88],"strategy":[78,122,159,180,230],"based":[79],"hash.":[82],"In":[83],"strategy,":[85],"key-dependent":[87],"rule":[89],"introduced":[91],"during":[92],"construction":[94],"channel,":[99],"enabling":[100],"communicating":[102],"parties":[103],"to":[104,155],"randomly":[105],"dynamically":[107],"filter":[108,192],"sparse":[110],"subset":[111],"from":[112],"set":[115],"as":[116],"set.":[120],"This":[121],"not":[123],"only":[124],"enhances":[125],"randomness":[127],"selection":[130],"but":[131],"also":[132],"tightly":[133],"couples":[134],"with":[142],"security":[144],"key.":[147],"We":[148],"employ":[149],"machine":[150],"learning-based":[151],"traffic":[152],"analysis":[153],"methods":[154],"experimentally":[156],"validate":[157],"two":[161],"types":[162],"channels:":[166],"storage":[168],"timing":[170],"channels.":[172,189],"The":[173],"experimental":[174],"results":[175],"demonstrate":[176],"that":[177],"proposed":[179,229],"significantly":[181],"improves":[182],"detection":[184,202],"resistance":[185],"When":[190],"key":[193],"size":[194],"exceeds":[195],"six":[196],"bits,":[197],"impact":[199],"effect":[203],"classifier":[206],"becomes":[207],"quite":[208],"significant.":[209],"Furthermore,":[210],"processing":[212],"delay":[213],"for":[214],"single":[216],"packet":[217],"less":[219],"than":[220],"8":[221],"$\u03bcs$,":[222],"indicating":[223],"feasibility":[225],"deploying":[227],"high-speed":[232],"environments.":[234]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-06-12T00:00:00"}
