TY - JOUR
T1 - Stego-Vector Driven Simultaneous Covert Channels in Streaming Applications
AU - Liu, Kewei
AU - Wu, Chao
AU - Li, Haozhi
AU - Xu, Ningkai
AU - Huang, Yongfeng
AU - Song, Tian
N1 - Publisher Copyright:
© 2005-2012 IEEE.
PY - 2026
Y1 - 2026
N2 - Network covert channels (NCCs) are an important technique for preserving transmission privacy but are often limited in capacity and reliability. Streaming applications, such as online calls and video conferencing, offer new opportunities to enhance NCCs due to their inherently simultaneous and multi-streamed architecture. To exploit this potential, we introduce a stego-vector model that represents the traffic foundation of streaming applications, where each vector component corresponds to an independent traffic feature stream. Based on this model, we estimate the achievable covert capacity of each covert channel and propose an orchestration algorithm that dynamically schedules channel usage to optimize overall performance. We implement multiple NCC algorithms under diverse streaming traffic scenarios, all coordinated by the proposed stego-vector model and orchestration algorithm. Experimental results show that our method improves transmission capacity by 3-25% while reducing exposure risk by more than 10% compared with classical multi-channel combination approaches, and achieves over 40% higher capacity than single-channel methods. Deployment experiments further demonstrate the lightweight nature of the proposed framework. To the best of our knowledge, this work presents the first systematic design of simultaneous covert channels over real-world streaming traffic, validating both the theoretical soundness and practical effectiveness of the proposed multi-stream covert communication framework.
AB - Network covert channels (NCCs) are an important technique for preserving transmission privacy but are often limited in capacity and reliability. Streaming applications, such as online calls and video conferencing, offer new opportunities to enhance NCCs due to their inherently simultaneous and multi-streamed architecture. To exploit this potential, we introduce a stego-vector model that represents the traffic foundation of streaming applications, where each vector component corresponds to an independent traffic feature stream. Based on this model, we estimate the achievable covert capacity of each covert channel and propose an orchestration algorithm that dynamically schedules channel usage to optimize overall performance. We implement multiple NCC algorithms under diverse streaming traffic scenarios, all coordinated by the proposed stego-vector model and orchestration algorithm. Experimental results show that our method improves transmission capacity by 3-25% while reducing exposure risk by more than 10% compared with classical multi-channel combination approaches, and achieves over 40% higher capacity than single-channel methods. Deployment experiments further demonstrate the lightweight nature of the proposed framework. To the best of our knowledge, this work presents the first systematic design of simultaneous covert channels over real-world streaming traffic, validating both the theoretical soundness and practical effectiveness of the proposed multi-stream covert communication framework.
KW - Network covert channel
KW - scheduling framework
KW - simultaneous transmission
KW - streaming application
UR - https://www.scopus.com/pages/publications/105042843328
U2 - 10.1109/TIFS.2026.3705932
DO - 10.1109/TIFS.2026.3705932
M3 - Article
AN - SCOPUS:105042843328
SN - 1556-6013
VL - 21
SP - 5988
EP - 6003
JO - IEEE Transactions on Information Forensics and Security
JF - IEEE Transactions on Information Forensics and Security
ER -