PHy covert channels: Can you see the idles?

Proceedings of the 11th USENIX Symposium on Networked Systems Design and Implementation, NSDI 2014

Volumn , Issue , 2014, Pages 173-185

  Lee, Ki Suh ^a   Wang, Han ^a   Weatherspoon, Hakim ^a  

^a Cornell University ^*  (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ACCESS CONTROL; BIT ERROR RATE; ERROR CORRECTION; SYSTEMS ANALYSIS;

COVERT CHANNELS; COVERT TIMING CHANNELS; INTER-PACKET SPACINGS; INTERPACKET DELAYS; PHYSICAL LAYERS; SECRET MESSAGES; SUB-MICROSECOND; TIMING CHANNELS;

NETWORK LAYERS;

EID: 85047979766     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (37)

1. Endace dag network cards. http://www.endace.com/ endace-dag-high-speed-packet-capture-cards. html.
2. Endaceprobes. http://www.endace.com/ endace- high- speed- packet- capture- probes. html.
3. IEEE Standard 802.3-2008. http://standards.ieee.org/about/get/802/802.3.html.
4. Intel Westmere. http://ark.intel.com/products/codename/33174/Westmere-EP.
5. Myricom Sniffer10G. http://www.myricom.com/sniffer.html.
6. Napatech. http://www.endace.com/ endace- high- speed- packet- capture- probes. html.
7. NAPI. http://linuxfoundation.org/en/Net:NAPI.
8. The CAIDA UCSD Anonymized Internet Traces. http://www.caida.org/datasets/.
9. Wildpackets. http://www.wildpackets.com/products/network_recorders.
10. Trusted computer system evaluation criteria. Tech. Rep. DOD 5200.28-STD, National Computer Security Center, December 1985.
11. BERK, V., GIANI, A., AND CYBENKO, G. Detection of covert channel encoding in network packet delays. Tech. Rep. TR2005-536, Department of Computer Science, Dartmouth College, November 2005.
12. CABUK, S., BRODLEY, C. E., AND SHIELDS, C. IP Covert Timing Channels: Design and Detection. In Proceedings of the 11th ACM conference on Computer and Communications Security (2004).
13. DOBRESCU, M., EGI, N., ARGYRAKI, K., CHUN, B.-G., FALL, K., IANNACCONE, G., KNIES, A., MANESH, M., AND RATNASAMY, S. RouteBricks: exploiting parallelism to scale software routers. In Proceedings of the ACM SIGOPS 22nd symposium on Operating systems principles (2009).
14. FISK, G., FISK, M., PAPADOPOULOS, C., AND NEIL, J. Eliminating steganography in internet traffic with active wardens. In Revised Papers from the 5th International Workshop on Information Hiding (2003).
15. FREEDMAN, D. A., MARIAN, T., LEE, J. H., BIRMAN, K., WEATHERSPOON, H., AND XU, C. Exact temporal characterization of 10 gbps optical wide-area network. In Proceedings of the 10th ACM SIGCOMM Conference on Internet Measurement (2010).
16. GIANVECCHIO, S., AND WANG, H. Detecting covert timing channels: an entropy-based approach. In Proceedings of the 14th ACM Conference on Computer and Communications Security (2007).
17. GILES, J., AND HAJEK, B. An information-theoretic and game-theoretic study of timing channels. IEEE Transactions on Information Theory 48, 9 (Sept. 2002), 2455–2477.
18. HAN, S., JANG, K., PARK, K., AND MOON, S. Packetshader: a gpu-accelerated software router. In Proceedings of the ACM SIGCOMM 2010 Conference (2010).
19. HANDLEY, M., KREIBICH, C., AND PAXSON, V. Network intrusion detection: Evasion, traffic normalization. In Proceedings of the 10th USENIX Security Symposium (2001).
20. KUNDUR, D., AND AHSAN, K. Practical internet steganography: Data hiding in ip. In Proceedings of Texas workshop on Security of Information Systems (2003).
21. LAMPSON, B. W. A note on the confinement problem. Communications of the ACM 16, 10 (October 1973), 613–615.
22. LEE, K. S., WANG, H., AND WEATHERSPOON, H. SoNIC: Precise Realtime Software Access and Control of Wired Networks. In Proceedings of the 10th USENIX Symposium on Networked Systems Design and Implementation (2013).
23. LIM, C. L., LEE, K. S., WANG, H., WEATHERSPOON, H., AND TANG, A. Packet clustering introduced by routers: Modeling, analysis and experiments. In Proceedings of the 48th Annual Conference on Information Sciences and Systems (2014).
24. LIU, Y., GHOSAL, D., ARMKNECHT, F., SADEGHI, A.-R., SCHULZ, S., AND KATZENBEISSER, S. Hide and Seek in Time: Robust Covert Timing Channels. In Proceedings of the 14th European Conference on Research in Computer Security (2009).
25. LIU, Y., GHOSAL, D., ARMKNECHT, F., SADEGHI, A.-R., SCHULZ, S., AND KATZENBEISSER, S. Robust and Undetectable Steganographic Timing Channels for i.i.d. Traffic. In Proceedings of the 12th International Conference on Information Hiding (2010).
26. MALAN, G. R., WATSON, D., JAHANIAN, F., AND HOWELL, P. Transport and application protocol scrubbing. In Proceedings of IEEE Conference on Computer Communications (2000).
27. MARIAN, T., LEE, K. S., AND WEATHERSPOON, H. Netslices: Scalable multi-core packet processing in user-space. In Proceedings of ACM/IEEE Symposium on Architectures for Networking and Communications Systems (2012).
28. MURDOCH, S. J., AND LEWIS, S. Embedding covert channels into tcp/ip. In Proceedings of 7th Information Hiding workshop (2005).
29. NLR. National Lambda Rail. http://www.nlr.net/.
30. OLSSON, R. pktgen the linux packet generator. In Proceeding of the Linux symposium (2005).
31. PADLIPSKY, M. A., SNOW, D. W., AND KARGER, P. A. Limitations of end-to-end encryption in secure computer networks. Tech. Rep. ESD-TR-78-158, Mitre Corporation, August 1978.
32. PENG, P., NING, P., AND REEVES, D. S. On the secrecy of timing-based active watermarking trace-back techniques. In Proceedings of the 2006 IEEE Symposium on Security and Privacy (2006).
33. RIZZO, L. Netmap: a novel framework for fast packet I/O. In Proceedings of the 2012 USENIX conference on Annual Technical Conference (2012).
34. ROWLAND, C. H. Covert channels in the tcp/ip protocol suite. First Monday (July 1997).
35. RUTKOWSKA, J. The implementation of passive covert channels in the linux kernel. In Proceedings of Chaos Communication Congress (2004).
36. SHAH, G., MOLINA, A., AND BLAZE, M. Keyboards and covert channels. In Proceedings of the 15th conference on USENIX Security Symposium (2006).
37. ZANDER, S., ARMITAGE, G., AND BRANSH, P. A survey of covert channels and countermeasures in computer network protocols. IEEE Communications Surveys and Tutorials 9, 3 (October 2007), 44–57.