Skip to content

Covert Channel

Definition

Any communication path that was not intended by the system designer and that bypasses access-control or monitoring policies. Network covert channels are a subset that operate over standard network infrastructure by exploiting protocol properties.

Related terms

Carrier (Cover Object)
The original file, image, audio recording, or video clip used to conceal the hidden message. The modified version containing the hidden data...
DCT Coefficient Manipulation
A transform-domain technique that embeds data in the discrete cosine transform coefficients of a JPEG block, operating within the compressed representation rather...
DNS Tunnelling
Encoding data inside DNS queries and responses to exfiltrate information or carry command-and-control traffic through a network that permits DNS but blocks...
Entropy Analysis
A statistical technique that measures the randomness of data in a field or stream. Protocol fields that should contain low-entropy predictable values...
LSB Substitution
Least-significant-bit substitution: the lowest-order bit of each sample value (pixel colour channel or audio sample) is overwritten with one bit of the...
Payload
The action the malware performs once active: data encryption (ransomware), credential theft (banking trojan), resource hijacking (cryptominer), or system destruction (wiper). The...
Protocol Anomaly Detection
A detection method that compares observed network traffic against the formal specification of each protocol (its RFC or standard) and flags fields...
Steganography
Concealing one file inside another in a way that hides the existence of the hidden file. LSB image manipulation, JPEG DCT coefficient...
Storage Channel
A covert channel that encodes information in the value of a protocol field, such as the IP Identification field or a DNS...
Timing Channel
A covert channel that encodes information in the intervals between network events, such as inter-packet delays, rather than in packet content. Timing...

Explained in these topics

Your journey to becoming a forensic professional starts here.

Practice with mock tests, learn from structured notes, and get your questions answered by a global forensic community, all in one place.