blend with normal web traffic; tools: curl to a controlled server 3. **ICMP tunneling** — encode in ping packets; tools: ptunnel 4. **Steganography** — hide data in images uploaded to legitimate sites