Hiding Data in Plain Sight: Building and Catching Network Covert Channels

Every layer of the network stack has fields and behaviors that exist for one narrow purpose — a padding byte, a subdomain label, a TTL counter — and almost none of them are checked for whether their c