Re: covert timing channel data

[email protected] Thu, 19 Aug 2010 12:11:56 -0700
Newsgroups gmane.comp.security.firewalls.wizards
Message-ID <[email protected]>
On Sat, Jul 24, 2010 at 07:05:10PM +0300, Melissa Stockman wrote:
> I'm doing research on covert timing channel detection [...]
> Does anyone know where I can find such data?

This is my timing side-channel link collection:
http://www.subspacefield.org/security/security_concepts/index.html#tth_sEc31.2.4

I should probably break that section up into remote & local, but I'm
already 3 levels deep :-)

I'd definitely check out "remote timing attacks are practical", I think
that one has the most information for your case.

You might want to check out Bernstein's AES attacks, or a statistician,
to characterise the distributions you're looking at.

I asked on NANOG a few months ago, but didn't get any good network
latency information.

BTW, "least amount of time" isn't a good measure.  It turns out that's too
unstable... 1st to 5th percentile measurements are much more stable.
-- 
A Weapon of Mass Construction
My emails do not have attachments; it's a digital signature that your mail
program doesn't understand. | http://www.subspacefield.org/~travis/ 
If you are a spammer, please email [email protected] to get blacklisted.

_______________________________________________
firewall-wizards mailing list
[email protected]
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards
signature.asc (application/pgp-signature, 833 B)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (OpenBSD)
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=6jub
-----END PGP SIGNATURE-----