About WoDiCoF
Worms Distributed Covert Channel Detection Framework
WoDiCoF is a framework for the evaluation of covert channel detection algorithms. It is designed to work with network recordings in the PCAP format.
Recordings can be both, provided by our users (e.g. as PCAP files) or generated using our traffic generator. They are first pre-processed and then provided to the detection algorithms.
Detection modules are partially provided by WoDiCoF but researchers can also integrate own detection modules using our API. To achieve parallelism and to leverage the computing power of our cluster, detection modules can use the map-reduce architecture of Apache Hadoop.
After executing the detection modules, their results are then fed into different visualization tools to generate graphs, figures or charts to help interpret the output. Please note that the visualization tools are currently in an early phase of development.
