PT Journal AU Voznak, M Zbranek, I Mehic, M Komosny, D Toral-Cruz, H Lin, J TI Covert Channel in RTP Payload Using a Pointer in Sip Header SO Communications - Scientific Letters of the University of Zilina PY 2016 BP 40 EP 47 VL 18 IS 1 DI 10.26552/com.C.2016.1.40-47 WP https://komunikacie.uniza.sk/artkey/csl-201601-0007.php DE steganography; VoIP; RTP; payload; SIP; pointer SN 13354205 AB The paper addresses the issue of hiding data in the network flow. The authors discuss a new proposal of the steganographic approach in IP telephony: transmitting texts using the pointer in the SIP header by means of a data stream within the RTP protocol. This method is based on tagging the binary sequences in payload of the RTP packets, with the individual binary sequences representing individual steganogram characters. Subsequently, the position of the binary sequences is recorded in the SIP header in the Via field and the branch parameter. The proposed way of hidden data transmission cannot be detected by existing anomaly detectors; and does not represent an approach to statistical detection of covert channels. In fact, it is a new contribution to covert communication in ordinary VoIP traffic. ER