Detection and Defense Mechanisms for Covert Timing communications

Abstract

This study presents a literature overview on methods for discovering and removing covert channels. Data transmission methods known as covert channels take advantage of system resources already in place but weren't intended for this purpose, such as firewalls, to transport data undetected. By setting up a seemingly secure channel of communication between two parties, sensitive information could be leaked from the more secure party to the less secure party. Using a shared network, two parties can easily communicate and exchange information to send confidential data without being detected. As a result, discovering covert communications is difficult. Network protocols place restrictions on Covert Storage Channels (CSC), preventing it from deviating from a set of guidelines. On the other hand, CTCs have stochastic behavior, which makes detection more challenging. Analysis of the state of art systems is done in this paper & it is found that the most likely option is an active warden which is a specialized network security system that is designed to filter out a range of irregularities seen in network data.