Some approaches to the assessment of the capacity of covert channels in IP-based networks

The estimation of security of the information in computer networks depends on potential possibilities of the attacker which can be used for unauthorized access to information, including with application of the covert channels. In this work is considered possibilities of construction of the covert channel at junction of two segments of private networks by means of a router. The model of the covert channel for a case if the router makes partial normalizing action on the emanating traffic is constructed. Estimations of a maximum throughput of the covert channel are received.