This requires 300 words.

Loki is a great tool for demonstrating the concept of covert communication channels. Our text uses the example of packing an ICMP packet with data, something you wouldnt typically find in an IP packet weaving its way throughout the internet. As network defenders, what tools do we have to identify covert communication channels, and is that something we should really be concerned about anyway? In the event that we wanted to hunt for covert communication channels, how could we measure our success?