Does anyone know of any work related to automatically making arbitrary "look" like, say, an HTTP session? I'm thinking of something that would automatically encode a VPN session as a valid, renderable HTML document (and not via the trivial way of just gzipping it and making it look like an HTTP compressed document, as I'm sure that would still be easy to block.) It seems like this should be possible, albeit with tons of performance decrease, but I can't find anything.
Perhaps how Google accomplishes getting through common firewalls with their news headlines; using an encrypted javascript tunnel. It isn't blocked by a majority of residential/enterprise firewalls, and using a similar technique one should be able to use HTTPS with an encrypted javascript tunnel to access out rather securely.
Perhaps there is something like this already in existence, and any resources/opinions would be great!
Such a technique is called steganography. It's possible but would require lots of bandwidth depending on how secure you need it to be. For example you can hide data in a photo by slightly changing the shades of red in it without changing the appearance of the photo noticeably.
I'm aware of steganography, but this would be slightly different than any published steg technique that I am aware of, as it would not be hiding in a preexisting carrier signal, it would be creating its own.
There are a lot of government supported efforts to research (especially finding and cracking) steganography. You can even look up articles in Chinese on the topic
Comments
Does anyone know of any work related to automatically making arbitrary "look" like, say, an HTTP session? I'm thinking of something that would automatically encode a VPN session as a valid, renderable HTML document (and not via the trivial way of just gzipping it and making it look like an HTTP compressed document, as I'm sure that would still be easy to block.) It seems like this should be possible, albeit with tons of performance decrease, but I can't find anything.
Perhaps how Google accomplishes getting through common firewalls with their news headlines; using an encrypted javascript tunnel. It isn't blocked by a majority of residential/enterprise firewalls, and using a similar technique one should be able to use HTTPS with an encrypted javascript tunnel to access out rather securely.
Perhaps there is something like this already in existence, and any resources/opinions would be great!
Such a technique is called steganography. It's possible but would require lots of bandwidth depending on how secure you need it to be. For example you can hide data in a photo by slightly changing the shades of red in it without changing the appearance of the photo noticeably.
I'm aware of steganography, but this would be slightly different than any published steg technique that I am aware of, as it would not be hiding in a preexisting carrier signal, it would be creating its own.
There are a lot of government supported efforts to research (especially finding and cracking) steganography. You can even look up articles in Chinese on the topic
http://comments.gmane.org/gmane.network.openvpn.devel/7185
obfsproxy looks like exactly what I was thinking of, thanks!
running openvpn through spiped may work too.