Covert Channel over Network Time Protocol
| Title | Covert Channel over Network Time Protocol |
| Publication Type | Conference Paper |
| Year of Publication | 2017 |
| Authors | Ameri, Aidin, Johnson, Daryl |
| Conference Name | Proceedings of the 2017 International Conference on Cryptography, Security and Privacy |
| Publisher | ACM |
| Conference Location | New York, NY, USA |
| ISBN Number | 978-1-4503-4867-6 |
| Keywords | covert channel, Human Behavior, human factors, Metrics, NTP, peer to peer security, pubcrawl, resilience, Resiliency, Scalability, Storage channel, Time channel |
| Abstract | In this paper, we scrutinize a way through which covert messages are sent and received using the Network Time Protocol (NTP), which is not easily detected since NTP should be present in most environment to synchronize the clock between clients and servers using at least one time server. We also present a proof of concept and investigate the throughput and robustness of this covert channel. This channel will use the 32 bits of fraction of seconds in timestamp to send the covert message. It also uses "Peer Clock Precision" field to track the messages between sender and receiver. |
| URL | https://dl.acm.org/doi/10.1145/3058060.3058082 |
| DOI | 10.1145/3058060.3058082 |
| Citation Key | ameri_covert_2017 |