Модифікація методу аутентифікації для створення прихованого каналу в SDN

Abstract

This paper describes the modification of an information hiding-based authentication mechanism in Software-Defined Networks (SDN) to establish a covert communication channel. The original method utilizes the IPID field of the IPv4 header to hide network devices' unique identifiers. This mechanism was modified by introducing a two-ID approach, where two distinct IDs represent binary '1' and '0', enabling the bit-by-bit transmission of arbitrary text messages instead of an authentication check. The modified covert channel was evaluated on a Mininet virtual testbed with a Ryu controller. A 512-byte covert message was successfully transmitted at a speed of 12.56 bps with a 0% error rate.