id: 06020207 dt: a an: 06020207 au: Wendzel, Steffen ti: The problem of traffic normalization within a covert channel’s network environment learning phase. so: Suri, Neeraj (ed.) et al., Sicherheit, Schutz und Zuverlässigkeit (SICHERHEIT 2012). Bonn: Gesellschaft für Informatik e.V. (GI) (ISBN 978-3-88579-289-5). Lect. Notes Inform. 195, 149-162 (2012). py: 2012 pu: Bonn: Gesellschaft für Informatik e.V. (GI) la: EN cc: ut: network covert storage channel; traffic normalization; active warden ci: li: ioport:LNI/Proceedings/Proceedings195/149.pdf ab: Summary: Network covert channels can build cooperating environments within overlay networks. Peers in such an overlay network can initiate connections with new peers and can build up new paths within the overlay network. To communicate with new peers, it is required to determine protocols which can be used between the peers ‒ this process is called the “Network Environment Learning Phase” (NEL Phase). We show that the NEL phase itself as well as two similar approaches are affected by traffic normalization, which leads to a two-army problem. Solutions to overcome this not completely solvable problem are presented and analyzed. A proof of concept code was implemented to verify the approach. rv: