WoDiCoF is a framework for developing, testing and evaluating new network covert channel detection methods and for re-producing experimental results from the scientific community. [It is] primarily designed for scientists who want to implement and analyze novel detection algorithms or who want to reproduce experimental results. However, WoDiCoF could also be used by the law-enforcement / professionals to determine the presence of network covert channels in data of criminals, e.g. within malware traffic.
We published a first paper on WoDiCoF, however, the projecct is currently in a re-design phase to make its utilization and architecture more accessible and developer-friendly.
- Ralf Keidel, Steffen Wendzel, Sebastian Zillien, Eric S. Conner and Georg Haas: WoDiCoF – A Testbed for the Evaluation of (Parallel) Covert Channel Detection Algorithms, Journal of Universal Computer Science, Vol. 24(5), pp. 556-576, 2018.