Abstract | ||
---|---|---|
A technique for detecting covert storage channels using a tree structure called a covert flow tree (CFT) is introduced. By traversing the paths of a CFT a comprehensive list of scenarios that potentially support covert communication via particular resource attributes can be automatically constructed. CFTs graphically illustrate the process through which information regarding the state of one attribute is relayed to another attribute, and how in turn that information is relayed to a listening process. Algorithms for automating the construction of CFT and potential covert channel operation sequences are presented. Two example systems are analyzed and their results are compared to two other analysis techniques performed on identical systems. The CFT approach not only identified all covert storage channels found by the other techniques, but discovered a channel not detected by the other techniques |
Year | DOI | Venue |
---|---|---|
1991 | 10.1109/RISP.1991.130770 | IEEE Symposium on Security and Privacy |
Keywords | Field | DocType |
security of data,telecommunication channels,telecommunications computing,trees (mathematics),CFT approach,covert flow tree,covert storage channels,listening process,potential covert channel operation sequences,resource attributes,tree structure | Data mining,Computer science,Computer security,Covert channel,Flow (psychology),Communication channel,Covert,Theoretical computer science,Tree structure,Telecommunication computing,Traverse,Covert communication | Conference |
Citations | PageRank | References |
15 | 1.13 | 6 |
Authors | ||
2 |
Name | Order | Citations | PageRank |
---|---|---|---|
Phillip A. Porras | 1 | 15 | 1.13 |
Richard A. Kemmerer | 2 | 378 | 102.62 |