HTTP Cookie Covert Channel Detection Based on Session Flow Interaction Features

Table 6

General flow statistical features.

Features
Total bytes sent	Bytes sent proportion	Total bytes received	Bytes received proportion
Packet length mean	Packet length median	Packet length mode	Packet length variance
Packet length standard deviation	Packet length coefficient of variance	Packet length skew from median	Packet length skew from mode
Packet time mean	Packet time median	Packet time mode	Packet time variance
Packet time standard deviation	Packet time coefficient of variance	Packet time skew from median	Packet time skew from mode
Request/response time mean	Request/response time median	Request/response time mode	Request/response time variance
Request/response time standard deviation	Request/response time coefficient of variance	Request/response time skew from median	Request/response time skew from mode