Mitigation of Storage Covert Channels in IPSec for QoS Aware Applications

摘要: Gateways implementing IPSec protocol suite are used to provide secure communication between different client machines over public infrastructure. However the exploitation of covert storage channel in may defeat very purpose protecting leakage information from machine. This threat gets more aggravated as some channels might be exploited machine even without compromising security gateways. The possibility by only machine, either form a colluding insider or due presence malware at poses serious any organization dealing with sensitive and resourceful adversary. existing approaches mitigate threats against severely restrict usability many QoS aware applications reducing allowance relevant header fields minimum. work overcomes same creating separate partitions based on application specific requirements. Subsequent processing involves extension scope services per predefined is achieved appropriate related using comprehensive treatment timing channels. When compared approaches, proposed approach provides better demanding contexts while maintaining equivalent strength protection providing performance. paper also outlines an implementation strategy Linux kernel stack.