@inbook{4e4a7918f1c74801bbcd6c9f1e5047d3,
title = "Covert channel detection in the ICMP payload using support vector machine",
abstract = "ICMP traffic is ubiquitous to almost TCP/IP based network. As such, many network devices consider ICMP traffic to be benign and will allow it to pass through, unmolested. So, attackers can generate arbitrary information tunneling in the payload of ICMP packets. To detect a ICMP covert channel, we used SVM which has excellent performance in pattern classification problems. Our experiments showed that the proposed method could detect the ICMP covert channel from normal ICMP traffic using SVM.",
author = "Taeshik Sohn and Jongsub Moon and Sangjin Lee and Lee, {Dong Hoon} and Jongin Lim",
year = "2003",
doi = "10.1007/978-3-540-39737-3_103",
language = "English",
isbn = "3540204091",
series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",
publisher = "Springer Verlag",
pages = "828--835",
editor = "Adnan Yazici and Cevat Sener",
booktitle = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",
}