An Evaluation Framework for the Analysis of Covert Channels in the TCP/IP Protocol Suite. - David Llamas; Alan Miller; Colin Allison (ECIW, 2005)