Framework for Covert Timing Communication Detection
Vrushali Uday Uttarwar, Dhananjay Manohar Dakhane · 2023
“Covert channels,” methods of transmitting data, leverage existing system resources originally not designed for such purposes, like firewalls, to discreetly convey information. This allows for the disclosure of sensitive and confidential data from one entity to another with lower security permissions, establishing what appears to be a secure communication pathway between them. The ease of communication and information exchange between two parties on a shared network facilitates covert interactions without detection. Consequently, identifying concealed communications becomes a challenging task. Covert Storage Channels (CSC) adheres to network protocols, limiting deviations from a set of rules. In contrast, Covert Timing Channels (CTCs) exhibit stochastic behavior, increasing the difficulty of detection. A potential solution to this challenge is the adoption of a generic technique capable of identifying concealed interactions within network traffic.