A study of on/off timing channel based on packet delay distribution

Computers and Security

Volumn 28, Issue 8, 2009, Pages 785-794

  Yao, Lihong ^a,b   Zi, Xiaochao ^a,b   Pan, Li ^a   Li, Jianhua ^a  

^a SHANGHAI JIAO TONG UNIVERSITY   (China)

^b NANJING UNIVERSITY   (China)

Author keywords

Covert timing channel; Information transmission rate; Network covert channel; On off timing channel; Packet delay distribution

Indexed keywords

COVERT TIMING CHANNELS; INFORMATION LEAKAGE; INFORMATION TRANSMISSION; INTRUSION DETECTION SYSTEMS; NETWORK COVERT CHANNEL; NETWORK FIREWALLS; PACKET DELAY; PACKET DELAY DISTRIBUTION; REAL NETWORKS; TIME CHANNELS; TIMING CHANNELS; TRANSMISSION PROBABILITIES; TRANSMISSION RATES;

COMPUTER CRIME; COMPUTER SYSTEM FIREWALLS; EXPERIMENTS; INTRUSION DETECTION; PACKET NETWORKS;

TIME MEASUREMENT;

EID: 71849083789     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.cose.2009.05.006     Document Type: Article

References (24)

1. Bauer M. New covert channels in HTTP: adding unwitting web browsers to anonymity sets. In: Proc. of the ACM workshop on privacy in the electronic society; 2003. pp. 72-8.
2. Berk V., Giani A., and Cybenko G. Detection of covert channel encoding in network packet delays. Technical report TR536 (Aug. 2005), Darthmouth College
3. Bovy C, Mertodimedjo H, Hooghiemstra G, Uijterwaal H, Mieghem P. Analysis of end-to-end delay measurements in Internet. In: Proc. of PAM; 2002. pp. 26-33.
4. Cabuk S, Brodley C, Shields C. IP covert timing channels: design and detection. In: Proc. of ACM CCS; 2004. pp. 178-87.
5. Cabuk S. Network covert channels: design, analysis, detection, and elimination. Thesis for Ph.D degree: Purdue University; 2006.
6. Chakinala RC, Kumarasubramanian A, Manokaran R, Noubir G, Pandu Rangan C, Sundaram R. Steganographic communication in ordered channels. In: Proc. of information hiding; 2006. pp. 42-57.
7. Chauhan S. Project report: analysis and detection of network covert channels. Project Report (Dec. 2005), University of Maryland, Baltimore County
8. Fisk G, Fisk M, Papadopoulos C, Neil J. Eliminating steganography in Internet traffic with active wardens. In: Proc. of 5th international workshop on information hiding; 2002. pp. 18-35.
9. Gianvecchio S, Wang H. Detecting covert timing channels: an entropy-based approach. In: Proc. of ACM CCS; 2007. pp. 307-16.
10. Giles J., and Hajek B. An information-theoretic and game-theoretic study of timing channels. IEEE Transaction on Information Theory 48 9 (2002) 2455-2477
11. Handley M, Paxson V. Network intrusion detection: evasion, traffic normalization, and end-to-end protocol semantics. In: Proc. of the 10th USENIX security symposium; Aug. 2001.
12. Hu M., Lou D., and Chang M. Dual-wrapped digital watermarking scheme for image copyright protection. Computers & Security 26 4 (2007) 319-330
13. Li Q., and Millis D.L. Jitter-based delay-boundary prediction of wide area networks. IEEE/ACM Transactions on Networking 9 5 (2001) 578-590
14. Lou D., and Liu J. Steganographic method for secure communications. Computers & Security 21 5 (2002) 449-460
15. Luo X, Chan EWW, Chang RKC. TCP covert timing channels: design and detection. In: IEEE international conference on dependable systems and networks (DSN'08); 2008 pp. 420-29.
16. Luo X, Chan EWW, Chang RKC. Cloak: a ten-fold way for reliable covert communications. ESORICS'07; 2007. pp. 283-98.
17. Mukherjee A. On the dynamics and significance of low-frequency components of Internet load. Internetworking: Research and Experience 5 4 (1994) 163-205
18. Ohsaki H, Murata M, Miyahara H. Modeling end-to-end packet delay dynamics of the Internet using system identification. In: Proc. of the international teletraffic congress; 2001. p.1027-38.
19. Smith R.W., and Knight G.S. Predictable design of network-based covert communication systems. IEEE Symposium on Security and Privacy (2008) 311-321
20. Sohn T, Moon J, Lee S, Lee DH, Lim J. Covert channel detection in the ICMP payload using support vector machine. In: Proc. of ISCIS; 2003. pp. 828-35.
21. Song L, Ephremides A. A covert channel in MAC protocols based on splitting algorithms. In: Proc. of the IEEE wireless communications and networking conference; 2005. pp. 1168-73.
22. Stillman R.M. Detecting IP covert timing channels by correlating packet timing with memory content. IEEE Southeastcon (2008) 204-209
23. Trusted Computer Systems Evaluation Criteria (TCSEC). Department of Defence Standard, CSC-STD-001-83; 1983.
24. Trabelsi Z., Hesham E., Frikha L., and Rabie T. A novel covert channel based on the IP header record route option. International Journal of Advanced Media and Communication 1 4 (2007) 328-350