A practical covert channel identification approach in source code based on directed information flow graph

Proceedings - 2011 5th International Conference on Secure Software Integration and Reliability Improvement, SSIRI 2011

Volumn , Issue , 2011, Pages 98-107

  Wu, JingZheng ^a,c   Ding, Liping ^a   Wang, Yongji ^a,b   Han, Wei ^a,c  

^a National Engineering Research Center for Fundamental Software   (China)

^b Institute of Software   (China)

^c UNIVERSITY OF CHINESE ACADEMY OF SCIENCES   (China)

Author keywords

Alias analysis; Covert channel identification; Directed information flow graph; Modularized analysis; Prune algorithm; Source code analysis

Indexed keywords

ALIAS ANALYSIS; COVERT CHANNELS; DIRECTED INFORMATION; MODULARIZED; SOURCE CODE ANALYSIS;

ALGORITHMS; BUILDING CODES; COMPUTER OPERATING SYSTEMS; COMPUTER PROGRAMMING LANGUAGES; GRAPHIC METHODS; SOFTWARE RELIABILITY;

RELIABILITY ANALYSIS;

EID: 80052931252     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SSIRI.2011.17     Document Type: Conference Paper

References (34)

1. B. W. Lampson, "A note on the confinement problem, " Commun. ACM, vol. 16, no. 10, pp. 613-615, 1973.
2. C.-R. Tsai, V. D. Gligor, and C. S. Chandersekaran, "A formal method for the identification of covert storage channels in source code, " in IEEE Symposium on Security and Privacy, 1987, pp. 74-87.
3. NCSC, "Trusted computer system evaluation criteria (orange book), " 1985.
4. ISO/IEC, "Common criteria for information technology security evaluation, " 2005.
5. NCSC, "A guide to understanding covert channel analysis of trusted systems, " 1993.
6. Y. Wang, J. Wu, L. Ding, and X. Liao, "Covert channel research, " Journal of Software, vol. 21, no. 9, pp. 2262-2288, 2010.
7. D. E. Denning, "A lattice model of secure information flow, " Commun. ACM, vol. 19, no. 5, pp. 236-243, 1976.
8. C.-R. Tsai, V. D. Gligor, and C. S. Chandersekaran, "On the identification of covert storage channels in secure systems, " IEEE Trans. Software Eng., vol. 16, no. 6, pp. 569-580, 1990.
9. R. A. Kemmerer, "Shared resource matrix methodology: An approach to identifying storage and timing channels, " ACM Trans. Comput. Syst., vol. 1, no. 3, pp. 256-277, 1983.
10. R. A. Kemmerer, "A practical approach to identifying storage and timing channels: Twenty years later, " in ACSAC, 2002, pp. 109-118.
11. J. A. Goguen and J. Meseguer, "Security policies and security models, " in IEEE Symposium on Security and Privacy, 1982, pp. 11-20.
12. N. Nagatou and T. Watanabe, "Run-time detection of covert channels, " in ARES, 2006, pp. 577-584.
13. J. T. Haigh, R. A. Kemmerer, J. McHugh, and W. D. Young, "An experience using two covert channel analysis techniques on a real system design, " IEEE Trans. Software Eng., vol. 13, no. 2, pp. 157-168, 1987.
14. J. K. Millen, "20 years of covert channel modeling and analysis, " in IEEE Symposium on Security and Privacy, 1999, pp. 113-114.
15. C. G. Girling, "Covert channels in LAN's, " IEEE Trans. Software Eng., vol. 13, no. 2, pp. 292-296, 1987.
16. J. Wu, Y. Wang, L. Ding, and X. Liao, "Improving performance of network covert timing channel through huffman coding, " in The 2010 FTRA International Symposium on Advances in Cryptography, Security and Applications for Future Computing (ACSA 2010), Gwangju, Korea, December 2010.
17. S. Zander, G. J. Armitage, and P. Branch, "A survey of covert channels and countermeasures in computer network protocols, " IEEE Communications Surveys and Tutorials, vol. 9, no. 1-4, pp. 44-57, 2007.
18. L. Yao, X. Zi, L. Pan, and J. Li, "A study of on/off timing channel based on packet delay distribution, " Computers & Security, vol. 28, no. 8, pp. 785 - 794, 2009.
19. P. Barham, B. Dragovic, K. Fraser, S. Hand, T. L. Harris, A. Ho, R. Neugebauer, I. Pratt, and A. Warfield, "Xen and the art of virtualization, " in SOSP, 2003, pp. 164-177.
20. T. Ristenpart, E. Tromer, H. Shacham, and S. Savage, "Hey, you, get off of my cloud: exploring information leakage in third-party compute clouds, " in CCS'09: Proceedings of the 16th ACM conference on Computer and communications security. New York, NY, USA: ACM, 2009, pp. 199-212.
21. A. Aviram, S. Hu, B. Ford, and R. Gummadi, "Determinating timing channels in compute clouds, " in CCSW'10: Proceedings of the 2010 ACM workshop on Cloud computing security workshop. New York, NY, USA: ACM, 2010, pp. 103-108.
22. K. Okamura and Y. Oyama, "Load-based covert channels between xen virtual machines, " in SAC, 2010, pp. 173-180.
23. M. Armbrust, A. Fox, R. Griffith, A. D. Joseph, R. H. Katz, A. Konwinski, G. Lee, D. A. Patterson, A. Rabkin, I. Stoica, and M. Zaharia, "A view of cloud computing, " Commun. ACM, vol. 53, no. 4, pp. 50-58, 2010.
24. S. H. Sellke, C.-C. Wang, S. Bagchi, and N. B. Shroff, "TCP/IP timing channels: Theory to implementation, " in INFOCOM, 2009, pp. 2204-2212.
25. S. Cabuk, C. E. Brodley, and C. Shields, "Ip covert timing channels: design and detection, " in ACM Conference on Computer and Communications Security, 2004, pp. 178-187.
26. V. Berk, A. Giani, G. Cybenko, and N. Hanover, "Detection of covert channel encoding in network packet delays, " Rapport technique TR536, de lUniversit́e de Dartmouth. Novembre, 2005.
27. H. Zeng, Y. Wang, W. Zu, J. Cai, and L. Ruan, "New definition of small message criterion and its application in transaction covert channel mitigating, " Journal of Software, vol. 20, no. 4, pp. 985-996, 2009.
28. J. Son and J. Alves-Foss, "A formal framework for real-time information flow analysis, " Comput. Secur., vol. 28, no. 6, pp. 421-432, 2009.
29. R. A. Kemmerer and P. A. Porras, "Covert flow trees: A visual approach to analyzing covert storage channels, " IEEE Trans. Software Eng., vol. 17, no. 11, pp. 1166-1185, 1991.
30. D. E. Bell, "Looking back at the bell-la padula model, " in Computer Security Applications Conference, 21st Annual, Tucson Arizona, USA, December 2005, pp. 337-351.
31. K. J. Biba, "Integrity considerations for secure computer systems, " The MITRE Corporation, Bedford, MA, Tech. Rep. MTR-3153, April, 1977.
32. R. A. Kemmerer and T. Taylor, "A modular covert channel analysis methodology for trusted DG/UXTM, " in ACSAC, 1996, pp. 224-235.
33. M. Hind and A. Pioli, "Evaluating the effectiveness of pointer alias analyses, " Science of Computer Programming, vol. 39, no. 1, pp. 31 - 55, 2001.
34. C. Lattner and V. S. Adve, "LLVM: A compilation framework for lifelong program analysis & transformation, " in CGO, 2004, pp. 75-88.