Implementing a passive network covert timing channel

Computers and Security

Volumn 29, Issue 6, 2010, Pages 686-696

  Zi, Xiaochao ^a,b   Yao, Lihong ^a,b   Pan, Li ^a   Li, Jianhua ^a  

^a SHANGHAI JIAO TONG UNIVERSITY   (China)

^b NANJING UNIVERSITY   (China)

Author keywords

Error correction; Frame synchronization; Network covert channel; Network security; Passive covert timing channel; VOD traffic

Indexed keywords

CHANNEL PARAMETER; COMMUNICATION PERFORMANCE; COVERT TIMING CHANNELS; FRAME DESIGN; FRAME SYNCHRONIZATION; INFORMATION TRANSMISSION; INTERMEDIATE NODE; NETWORK COVERT CHANNEL; THREE CHANNEL; TRANSMISSION INTERVALS;

DESIGN; GATEWAYS (COMPUTER NETWORKS); PASSIVE NETWORKS; SYNCHRONIZATION; TIME MEASUREMENT; TRANSMISSIONS; VIDEO ON DEMAND;

NETWORK SECURITY;

EID: 77955419362     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.cose.2009.12.010     Document Type: Article

References (32)

1. C. Abad IP checksum covert channels and selected hash collision Technical report 2001 University of California
2. V. Berk, A. Giani, and G. Cybenko Detection of covert channel encoding in network packet delays Technical report TR536 Aug. 2005 Darthmouth College
3. S. Bhadra, S. Bodas, S. Shakkottai, and S. Vishwanath Communication through jamming over a slotted ALOHA channel IEEE Transactions on Information Theory 54 11 2008 5257 5262
4. Buchanan WJ, Llamas D. Covert channel analysis and detection with reverse proxy servers using Microsoft Windows. In: Proceedings of the 3rd European conference on information warfare and security; 2004.
5. Cabuk S, Brodley C, Shields C. IP covert timing channels: design and detection. In: Proceedings of ACM CCS; 2004. p. 178-87.
6. S. Cabuk, C. Brodley, and C. Shields IP covert channel detection ACM Transactions on Information and Systems Security 12 4 2009 22:1 22:29
7. Cabuk S. Network covert channels: design, analysis, detection, and elimination. Thesis for Ph.D. degree. Purdue University; 2006.
8. Chakinala RC, Kumarasubramanian A, Manokaran R, Noubir G, et al. Steganographic communication in ordered channels. In: Proceedings of information hiding; 2006. p. 42-57.
9. Fisk G, Fisk M, Papadopoulos C, Neil J. Eliminating steganography in Internet traffic with active wardens. In: Proceedings of information hiding; 2002. p. 18-35.
10. Gianvecchio S, Wang H. Detecting covert timing channels: an entropy-based approach. In: Proceedings of the 14th ACM conference on computer and communications security; 2007.p. 307-16.
11. Giffin J, Greenstadt R, Litwack P, Tibbetts R. Covert messaging through TCP timestamps. In: Proceedings of the privacy enhancing technologies workshop (PET); 2002. p. 194-208.
12. J. Giles, and B. Hajek An information-theoretic and game-theoretic study of timing channels IEEE Transaction on Information Theory 48 9 2002 2455 2477
13. C.G. Girling Covert channels in LAN's IEEE Transactions on Software Engineering 13 2 1987 292 295
14. Handley M, Paxson V. Network intrusion detection: evasion, traffic normalization, and end-to-end protocol semantics. In: Proceedings of the 10th USENIX security symposium; Aug. 2001.
15. B.W. Lampson A note on the confinement problem Communications of the ACM 16 10 1973 613 615
16. R. Lanotte, and M.S. Andrea Automatic analysis of the NRL pump Electronic Notes Theoretical Computer Science 99 2004 245 266
17. Q. Li, and D.L. Millis Jitter-based delay-boundary prediction of wide area networks IEEE Trans. on Networking 9 5 2001 578 590
18. Llamas D, Allison C, Miller A. Covert channels in internet protocols: a survey. In: Proceedings of 6th annual symposium about the convergence of telecommunications, networking and broadcasting; 2005.
19. D. Lou, and J. Liu Steganographic method for secure communications Computers and Security 21 5 2002 449 460
20. Luo X, Chan EWW, Chang RKC. TCP covert timing channels: design and detection. In: Proceedings of IEEE international conference on dependable systems and networks; 2008. p. 420-9.
21. A. Patel, M. Shah, R. Chandramouli, and K.P. Subbalakshm Covert channel forensics on the Internet: issues, approaches, and experiences International Journal of Network Security 5 1 2007 41 50
22. Rutkowska J. The implementation of passive covert channels in the Linux kernel. Available: http://invisiblethings.org/papers.html.
23. Schear N, Kintana C, Zhang Q, Vahdat A. Glavlit: preventing exfiltration at wire speed. In: Proceedings of the 5th ACM workshop on hot topics in networks (HotNets-V); November 2006.
24. Singh A. Eraser: an exploit-specific monitor to prevent malicious communication channel. Technical report in Georgia Institute of Technology, GIT-CERCS-04-28; 2004.
25. Sohn T, Noh T, Moon J. Support vector machine based ICMP covert channel attack detection. In: Proceedings of 2nd international workshop on mathematical methods, models, and architectures for computer networks; 2003a. p. 461-4.
26. Sohn T, Seo J, Moon J. A Study on the covert channel detection of TCP/IP header using support vector machine. In: Proceedings of 5th international conference on information and communications security; 2003b. p. 313-24.
27. Trusted Computer Systems Evaluation Criteria (TCSEC). Department of Defense Standard, CSC-STD-001-83; 1983.
28. E. Tumoian, and M. Anikeev Detecting NUSHU covert channels using neural networks Technical report 2005 Taganrog State University of Radio Engineering
29. Tumoian E, Anikeev M. Network based detection of passive covert channels in TCP/IP. In: Proceedings of the IEEE conference on local computer networks 30th anniversary; 2005b. p. 802-9.
30. L. Yao, X. Zi, L. Pan, and J. Li A study of on/off timing channel based on packet delay distribution Computers and Security 28 8 2009 785 794
31. S. Zander, G. Armitage, and P. Branch A survey of covert channels and countermeasure in computer network protocols IEEE Communications Survey and Tutorials 9 3 2007 44 57
32. Zander S, Armitage G., Branch P. An empirical evaluation of IP time to live covert channels. In: Proceedings of 15th IEEE international conference on networks; 2007b. p. 42-7.