DETECTION OF COVERT TIMING CHANNELS BASED ON STATISTICAL METHODS

Q: How can I download an article?

To download an article from SID, first log in to the site, search for the article title, and click on the 'Download Article' option.

Q: How can I download an ISI article?

To download an ISI article on SID, enter the keyword or article title in the search bar, view the relevant results, click on the desired article, and select the 'Download Article' option.

Q: How can I access the SID database?

To access the SID database, visit SID.ir, create an account, and log in to access scientific resources.

Q: Is downloading articles from SID free?

Some articles on SID are available for free, while others require payment. Details are specified on the article's page.

BEYRAMI B.; DEHGHANI M.; SALEH ESFAHANI M.

مرکز اطلاعات علمی Scientific Information Database (SID) - Trusted Source for Research and Academic Resources

Journal Paper

Paper Information

Journal: JOURNAL OF ELECTRONIC AND CYBER DEFENCE Year:2014 | Volume:2 | Issue:1 (5) Page(s): 13-24

Download Full-Text

Persian Verion

View:

1,165

Download:

Cites:

Information Journal Paper

Title

DETECTION OF COVERT TIMING CHANNELS BASED ON STATISTICAL METHODS

Author(s)

BEYRAMI B. | DEHGHANI M. | SALEH ESFAHANI M. | Issue Writer Certificate

Keywords

COVERT TIMING CHANNELQ2

DETECTIONQ2

ENTROPYQ1

REGULARITYQ2

KOLMOGOROV-SMIRNOVQ2

Abstract

COVERT TIMING CHANNELs, as a growing threat of network security, provide the possibility of leaking confidential information to an attacker. Thus, DETECTION and countering these channels are important as a defensive measure in computer networks. The attacker uses an appropriate encoding schema to modulate covert information on temporal features of network packet stream. Embedding covert information in net- work traffic, casuses changes in traffic statistical properties such as distribution, correlation and ENTROPY, which can be used in DETECTION of COVERT TIMING CHANNELs. In this paper, statistical methods are identified and analyzed to detect these channels, and two encoding schemas L-bit to N-packet and non-detectable are used to implementi COVERT TIMING CHANNELs and those are evaluated. The results show that by using KOLMOGOROV-SMIRNOV, REGULARITY, corrected ENTROPY and corrected Conditional ENTROPY tests, we are able to completely detect L-bit to N-packet channel, and the stealthiness of non-detectable timing channel can be proved in a practical evaluation as well.

Cites

No record.

References

No record.

Cite

APA: Copy

BEYRAMI, B., DEHGHANI, M., & SALEH ESFAHANI, M.. (2014). DETECTION OF COVERT TIMING CHANNELS BASED ON STATISTICAL METHODS. JOURNAL OF ELECTRONIC AND CYBER DEFENCE, 2(1 (5)), 13-24. SID. https://sid.ir/paper/243197/en

Vancouver: Copy

BEYRAMI B., DEHGHANI M., SALEH ESFAHANI M.. DETECTION OF COVERT TIMING CHANNELS BASED ON STATISTICAL METHODS. JOURNAL OF ELECTRONIC AND CYBER DEFENCE[Internet]. 2014;2(1 (5)):13-24. Available from: https://sid.ir/paper/243197/en

IEEE: Copy

B. BEYRAMI, M. DEHGHANI, and M. SALEH ESFAHANI, “DETECTION OF COVERT TIMING CHANNELS BASED ON STATISTICAL METHODS,” JOURNAL OF ELECTRONIC AND CYBER DEFENCE, vol. 2, no. 1 (5), pp. 13–24, 2014, [Online]. Available: https://sid.ir/paper/243197/en

Related Journal Papers