An Analysis of Covert Timing Channels

Article type: Research Article

Authors: Wray, John C.^{; *}

Affiliations: Digital Equipment Corporation, 550 King Street (LKG2-1/X6), Littleton, MA 01460-1289, USA

Note: [*] This paper presents the opinions of its author, which are not necessarily those of Digital Equipment Corporation. Opinions expressed in this paper must not be construed to imply any product commitment on the part of Digital Equipment Corporation.

Abstract: Covert channels have traditionally been categorized as either storage channels or timing channels [8, 9]. This paper questions this categorization, and discusses channels that cannot be clearly identified as either storage or timing channels, but have aspects of both. A new model of timing channels is presented, which allows for channels that have characteristics of both storage channels and timing channels, and a method is given for constructing all channels in a computer system that have timing channel characteristics. Since Kemmerer's shared resource matrix methodology [7] has the potential to detect all channels that have storage characteristics, it is argued that the two methods jointly have the capability to construct all channels in a computer system. The approach to timing channels provides a justification of specific mechanisms for reducing their bandwidth which were employed in the VAX11VAX is a trademark of Digital Equipment Corporation. Virtual Machine Monitor, as described in [4] and [5].

DOI: 10.3233/JCS-1992-13-403

Journal: Journal of Computer Security, vol. 1, no. 3-4, pp. 219-232, 1992