Steganalysis on Covert Channel in IPv6 Flow Label

Modern communication networks provide rich channels for steganographic tools to hide secret data. In addition to payload, an emerging trend is to utilize protocol headers to hide data as well. This paper studies the IPv6 packets with data hidden in their Flow Label field, and proposes an algorithm which utilizes chi-square test to detect the existence of hidden data by the conformance of uniform distribution.