C2Detector: a covert channel detection framework in cloud computing

Jingzheng Wu, Liping Ding, Yanjun Wu, Nasro Min-Allah, Samee U. Khan, Yongji Wang
<span title="2013-05-08">2013</span> <i title="Wiley"> <a target="_blank" rel="noopener" href="https://fatcat.wiki/container/sdme5pnua5auzcsjgqmqefb66m" style="color: black;">Security and Communication Networks</a> </i> &nbsp;
Cloud computing is becoming increasingly popular because of the dynamic deployment of computing service. Another advantage of cloud is that data confidentiality is protected by the cloud provider with the virtualization technology. However, a covert channel can break the isolation of the virtualization platform and leak confidential information without letting it known by virtual machines. In this paper, the threat model of covert channels is analyzed. The channels are classified into three
more &raquo; ... gories, and only the category that is new to cloud computing is concerned, for example, CPU load-based, cache-based, and shared memory-based covert channels. The covert channel scenario is modeled into an error-corrected four-state automaton, and two error-corrected algorithms are designed. A new detection framework termed C 2 Detector is presented. C 2 Detector includes a captor located in the hypervisor and a two-phase synthesis algorithm implemented as Markov and Bayesian detectors. A prototype of C 2 Detector is implemented on Xen hypervisor, and its performance of detecting the covert channels is demonstrated. The experiment results show that C 2 Detector can detect the three types of the covert channels with an acceptable false positive rate by using a pessimistic threshold. Moreover, C 2 Detector is a plug-in framework and can be easily extended. It is believed that new covert channels can be detected by C 2 Detector in the future.
<span class="external-identifiers"> <a target="_blank" rel="external noopener noreferrer" href="https://doi.org/10.1002/sec.754">doi:10.1002/sec.754</a> <a target="_blank" rel="external noopener" href="https://fatcat.wiki/release/t4mlcezynzczbjq3ol23ag6oea">fatcat:t4mlcezynzczbjq3ol23ag6oea</a> </span>
<a target="_blank" rel="noopener" href="https://web.archive.org/web/20160704155452/http://sameekhan.org/pub/W_K_2013_SCN.pdf" title="fulltext PDF download" data-goatcounter-click="serp-fulltext" data-goatcounter-title="serp-fulltext"> <button class="ui simple right pointing dropdown compact black labeled icon button serp-button"> <i class="icon ia-icon"></i> Web Archive [PDF] <div class="menu fulltext-thumbnail"> <img src="https://blobs.fatcat.wiki/thumbnail/pdf/05/a8/05a8fdc6308ee687120ff9ab25f0f98202febb19.180px.jpg" alt="fulltext thumbnail" loading="lazy"> </div> </button> </a> <a target="_blank" rel="external noopener noreferrer" href="https://doi.org/10.1002/sec.754"> <button class="ui left aligned compact blue labeled icon button serp-button"> <i class="unlock alternate icon" style="background-color: #fb971f;"></i> wiley.com </button> </a>