The role of hierarchical entropy analysis in the detection and time-scale determination of covert timing channels

Omar Darwish, Ala Al-Fuqaha, Muhammad Anan, Nidal Nasser

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

10 Citations (Scopus)

Abstract

this paper evaluates the potential use of hierarchal entropy analysis to detect covert timing channels and determine the best time-scale that reveals it. A data transmission simulator is implemented to generate a collection of overt and covert channels. The hierarchical entropy analysis approach is then utilized to detect the covert timing channels and identify the type-scale that provides the highest evidence that the underlying channel is covert. Hierarchical entropy divides the stream of inter-arrival times greedily to identify the time-scale the best reveals the existence of a covert-timing channel. The lowest entropy in the sequence is the best indicator that identifies non-random patterns in the given data stream. The results show that hierarchal entropy analysis performs significantly better than the classical flat entropy approach in the detection of covert timing channels. Furthermore, the hierarchical entropy analysis provides details about the best time-scale that reveals the features of the covert timing channel.

Original languageEnglish
Title of host publicationIWCMC 2015 - 11th International Wireless Communications and Mobile Computing Conference
PublisherInstitute of Electrical and Electronics Engineers Inc.
Pages153-159
Number of pages7
ISBN (Electronic)9781479953448
DOIs
Publication statusPublished - 2 Oct 2015
Externally publishedYes
Event11th International Wireless Communications and Mobile Computing Conference, IWCMC 2015 - Dubrovnik, Croatia
Duration: 24 Aug 201528 Aug 2015

Publication series

NameIWCMC 2015 - 11th International Wireless Communications and Mobile Computing Conference

Conference

Conference11th International Wireless Communications and Mobile Computing Conference, IWCMC 2015
Country/TerritoryCroatia
CityDubrovnik
Period24/08/1528/08/15

Keywords

  • Covert timing channels
  • Hierarchical entropy
  • Pattern recognition
  • Security
  • Time-scale determination

Fingerprint

Dive into the research topics of 'The role of hierarchical entropy analysis in the detection and time-scale determination of covert timing channels'. Together they form a unique fingerprint.

Cite this