WEB COVERT TIMING CHANNELS (DETECTION BASED ON ENTROPY)

Q: How can I download an article?

To download an article from SID, first log in to the site, search for the article title, and click on the 'Download Article' option.

Q: How can I download an ISI article?

To download an ISI article on SID, enter the keyword or article title in the search bar, view the relevant results, click on the desired article, and select the 'Download Article' option.

Q: How can I access the SID database?

To access the SID database, visit SID.ir, create an account, and log in to access scientific resources.

Q: Is downloading articles from SID free?

Some articles on SID are available for free, while others require payment. Details are specified on the article's page.

Nasseralfoghara Mehrdad; Hamidi Hamid Reza

مرکز اطلاعات علمی Scientific Information Database (SID) - Trusted Source for Research and Academic Resources

Seminar Paper

Paper Information

Seminar: INTERNATIONAL CONFERENCE ON WEB RESEARCH
Year:2019 | Issue:5

Download Full-Text

View:

Download:

Information Seminar Paper

Title

WEB COVERT TIMING CHANNELS (DETECTION BASED ON ENTROPY)

Author(s)

Nasseralfoghara Mehrdad | Hamidi Hamid Reza

Keywords

INFORMATION SECURITY

CONVERT CHANNEL

TIMING CHANNEL

WEB

ENTROPY

Abstract

TODAYS ANALYZING WEB WEAKNESSES AND VULNERABILITIES IN ORDER TO FIND SECURITY ATTACKS HAS BECOME MORE URGENT. IN CASE THERE IS A COMMUNICATION CONTRARY TO THE SYSTEM SECURITY POLICIES, A COVERT CHANNEL HAS BEEN CREATED. THE ATTACKER CAN EASILY DISCLOSURE INFORMATION FROM THE VICTIM’ S SYSTEM WITH JUST ONE PUBLIC ACCESS PERMISSION. COVERT TIMING CHANNELS, UNLIKE COVERT STORAGE CHANNELS, DO NOT HAVE MEMORY STORAGE AND THEY DRAW LESS ATTENTION. DIFFERENT METHODS HAVE BEEN PROPOSED FOR THEIR IDENTIFICATION, WHICH GENERALLY BENEFIT FROM THE SHAPE OF TRAFFIC AND THE CHANNEL’ S REGULARITY. IN THIS ARTICLE, AN ENTROPYBASED DETECTION METHOD IS DESIGNED AND IMPLEMENTED. THE ATTACKER CAN ADJUST THE AMOUNT OF CHANNEL ENTROPY BY CONTROLLING MEASURES SUCH AS CHANGING THE CHANNEL’ S LEVEL OR CREATING NOISE ON THE CHANNEL TO PROTECT FROM THE ANALYST’ S DETECTION. AS A RESULT, THE ENTROPY THRESHOLD IS NOT ALWAYS CONSTANT FOR DETECTION. BY COMPARING THE ENTROPY FROM DIFFERENT LEVELS OF THE CHANNEL AND THE ANALYST, WE CONCLUDE THAT THE ANALYST MUST INVESTIGATE TRAFFIC AT ALL POSSIBLE LEVELS.

Cites

No record.

References

No record.

Cite

APA: Copy

Nasseralfoghara, Mehrdad, & Hamidi, Hamid Reza. (2019). WEB COVERT TIMING CHANNELS (DETECTION BASED ON ENTROPY). INTERNATIONAL CONFERENCE ON WEB RESEARCH. SID. https://sid.ir/paper/949079/en

Vancouver: Copy

Nasseralfoghara Mehrdad, Hamidi Hamid Reza. WEB COVERT TIMING CHANNELS (DETECTION BASED ON ENTROPY). 2019. Available from: https://sid.ir/paper/949079/en

IEEE: Copy

Mehrdad Nasseralfoghara, and Hamid Reza Hamidi, “WEB COVERT TIMING CHANNELS (DETECTION BASED ON ENTROPY),” presented at the INTERNATIONAL CONFERENCE ON WEB RESEARCH. 2019, [Online]. Available: https://sid.ir/paper/949079/en

Related Journal Papers

No record.

Related Seminar Papers

No record.

Related Plans

No record.

Recommended Workshops