Defenses against
Covert Channels
¨Don’t let attacker get root or administrator access on hosts
–Harden OS
–Install latest security patches
¨Install network IDS
–Loki and other covert channels can be detected by Snort