Covert Channels - Here to Stay

reportActive / Technical Report | Accession Number: ADA465048 | Open PDF

Abstract:

We discuss the difficulties of satisfying high-assurance system requirements without sacrificing system capabilities. To alleviate this problem, we show how trade-offs can be made to reduce the threat of covert channels. We also clarify certain concepts in the theory of covert channels. Traditionally, a covert channels vulnerability was measured by the capacity. We show why a capacity analysis alone is not sufficient to evaluate the vulnerability and introduce a new metric referred to as the small message criterion.

Author(s):
Moskowitz, Ira S. ; Kang, Myong H.
Author Organization(s):
NAVAL RESEARCH LAB WASHINGTON DC INFORMATION TECHNOLOGY DIV
Descriptive Note:
Conference paper
Supplementary Note:
Presented at Annual Conference on Computer Assurance (9th) held in Gaithersburg, MD on 27 Jun-1 Jul 1994. Published in the Proceedings of the Annual Conference on Computer Assurance (9th), p235-243, 1994.
Pagination:
0011

Security Markings

DOCUMENT & CONTEXTUAL SUMMARY

Distribution:
Approved For Public Release
Distribution Statement:
Approved For Public Release; Distribution Is Unlimited.

RECORD

Collection: TR
Identifying Numbers
Monitor Series:
NRL/ITD/5500
 Subject Terms
Joint Capability Areas:
JCA_8_Building Partnerships; JCA_8.1_Communicate; JCA_8.1.3_Influence Adversary and Competitor Audiences; JCA_6_Net Centric; JCA_6.1_Information Transport; JCA_5_Command and Control; JCA_5.3_Planning; JCA_1_Force Support; JCA_3.2_Engagement; JCA_3_Force Application; JCA_6.4.1_Secure Information Exchange; JCA_3.2.2_Non-Kinetic Means; JCA_5.5.2_Task; JCA_5.5_Direct; JCA_6.4_Information Assurance; JCA_1.3_Human Capital Management
Modernization Areas:
Cyber
Communities of Interest:
Cyber
Descriptor(s):
*PERFORMANCE(ENGINEERING), *INFORMATION THEORY, *CHANNELS, REPRINTS, SYMPOSIA, VULNERABILITY, INFORMATION ASSURANCE, INFORMATION SECURITY, COMPUTER NETWORKS, RELIABILITY, DATA PROCESSING SECURITY, COMPUTER COMMUNICATIONS
Field(s)/Group(s):
Computer Systems Management and Standards
Keyword(s):
*COVERT CHANNELS, *HIGH ASSURANCE SYSTEMS, COMMUNICATION CHANNELS, THE PUMP, COMPUTER SYSTEMS, CAPACITY ANALYSIS
Report Date:
1994 Jul 07
Creation Date:
2007 Apr 18