firewall-wizards Digest, Vol 51, Issue 2

Send firewall-wizards mailing list submissions to
firewall-wizards@listserv.icsalabs.com

To subscribe or unsubscribe via the World Wide Web, visit
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards
or, via email, send a message with subject or body 'help' to
firewall-wizards-request@listserv.icsalabs.com

You can reach the person managing the list at
firewall-wizards-owner@listserv.icsalabs.com

When replying, please edit your Subject line so it is more specific
than "Re: Contents of firewall-wizards digest..."

Today's Topics:

1. Re: covert timing channel data (Gautier . Rich)

----------------------------------------------------------------------

Message: 1
Date: Fri, 30 Jul 2010 08:06:18 -0400
From: "Gautier . Rich" <RGautier@drc.com>
Subject: Re: [fw-wiz] covert timing channel data
To: Firewall Wizards Security Mailing List
<firewall-wizards@listserv.icsalabs.com>
Message-ID:
<28501FA2E57B02498626E5FE0921609A05CA063A96@exchange.drc.com>
Content-Type: text/plain; charset="us-ascii"

Here is an example with regards to software algorithms
http://www.owasp.org/index.php/Covert_timing_channel

There is no 'actual interarrival times' or program to generate such an attack - A covert timing channel attack is a method (think of methods of cryptanalysis such as frequency analsysis) to analyze the inner operations of a program based on design differences in operations that make up how the system works. The page I included has an example of a password checking algorithm that could be 'attacked' using a covert timing channel attack because the methodology of the sample program differs based on successful password length.

Rich Gautier
Sr. Product Architect
Kadix Systems
Office: 571-226-8828
Cell: 703-231-2156

From: firewall-wizards-bounces@listserv.icsalabs.com [mailto:firewall-wizards-bounces@listserv.icsalabs.com] On Behalf Of Melissa Stockman
Sent: Saturday, July 24, 2010 12:05 PM
To: firewall-wizards@listserv.icsalabs.com
Subject: [fw-wiz] covert timing channel data

Hi,

I'm doing research on covert timing channel detection and was not able to get data from any of the authors of various papers describing different covert timing channel techniques. Does anyone know where I can find such data? (either the program to generate it, or the actual interarrival times in a comma separated file)

Thanks and regards,

Melissa Stockman

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://listserv.icsalabs.com/pipermail/firewall-wizards/attachments/20100730/a656b6db/attachment-0001.html>

------------------------------

_______________________________________________
firewall-wizards mailing list
firewall-wizards@listserv.icsalabs.com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards

End of firewall-wizards Digest, Vol 51, Issue 2
***********************************************