firewall-wizards August 2010 archive
Main Archive Page > Month Archives  > firewall-wizards archives
firewall-wizards: Re: [fw-wiz] covert timing channel data

Re: [fw-wiz] covert timing channel data

From: <travis+ml-firewalls_at_nospam>
Date: Thu Aug 19 2010 - 19:11:56 GMT
To: Firewall Wizards Security Mailing List <firewall-wizards@listserv.icsalabs.com>

On Sat, Jul 24, 2010 at 07:05:10PM +0300, Melissa Stockman wrote:
> I'm doing research on covert timing channel detection [...]
> Does anyone know where I can find such data?

This is my timing side-channel link collection:
http://www.subspacefield.org/security/security_concepts/index.html#tth_sEc31.2.4

I should probably break that section up into remote & local, but I'm
already 3 levels deep :-)

I'd definitely check out "remote timing attacks are practical", I think
that one has the most information for your case.

You might want to check out Bernstein's AES attacks, or a statistician,
to characterise the distributions you're looking at.

I asked on NANOG a few months ago, but didn't get any good network
latency information.

BTW, "least amount of time" isn't a good measure. It turns out that's too
unstable... 1st to 5th percentile measurements are much more stable.
-- A Weapon of Mass Construction My emails do not have attachments; it's a digital signature that your mail program doesn't understand. | http://www.subspacefield.org/~travis/ If you are a spammer, please email john@subspacefield.org to get blacklisted.

_______________________________________________
firewall-wizards mailing list
firewall-wizards@listserv.icsalabs.com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards