Abstract:Owing to their hidden natures, covert channels can be utilized such that trojan applications can communicate stealthily with each other or exchange stolen private information without being revealed. To prevent damage incurred by covert channels, researchers have preemptively scrutinized diverse covert channels that can be devised by an attacker. Although covert channels based on sensor data may interest an attacker because sensing operation is a key task in Internet of Things (IoT), we do not find any covert channel studies that adapted the Sequential Probability Ratio Test (SPRT) to sensor data except our prior study [27], where the SPRT is applied to sensor data in Android systems before an attacker's conception; however, our previous study showed limitations owing to the static nature of the SPRT parameter settings and the method of mapping sensor data to sample types for covert channel creation. To demonstrate that these limitations can be pacified, we propose a covert channel that dynamically applies the SPRT to sensor data in IoT. In our proposed covert channel, stealthy information bit 1 (resp. 0) is encoded to and decoded from a sequence of sensor data when the SPRT with dynamic parameter settings accepts an alternate (resp. null) hypothesis. We implement our proposed covert channel in Raspberry Pi 3 Model B devices and evaluate it in terms of various metrics. Evaluation results indicate that every encoded stealthy information byte is successfully decoded in our covert channel. Furthermore, 3.513 samples and 28.105 SPRT executions at the most are required for encoding/decoding a stealthy information byte in our devised covert channel on an average, thus resulting in fast encoding/decoding in our covert channel. Finally, our developed covert channel yields a throughput ranging from 4097.5 to 9061.67 bits/sec.

A Covert Channel Based on Web Read-time Modulation

Anti-jamming Timing Channels for Wireless Networks

IP Covert Channel Detection

Mimic: An active covert channel that evades regularity-based detection

Creating and Developing a High-Throughput Covert Channel via Program Execution

A Novel Covert Timing Channel Based on Bitcoin Messages

A Covert Channel Using Core Alternation

CONNECTION: COvert chaNnel NEtwork attaCk Through bIt-rate mOdulatioN

Liquid: A detection-resistant covert timing channel based on IPD shaping

Traffic Controller: A Practical Approach to Block Network Covert Timing Channel

An Entropy-Based Approach to Detecting Covert Timing Channels

A Self Adaptive Jamming Strategy to Restrict Covert Timing Channel

A survey of covert channels and countermeasures in computer network protocols

Covert Communications on Renewal Packet Channels

Weaknesses of popular and recent covert channel detection methods and a remedy

Covert Channel Establishment Through the Dynamic Adaptation of the Sequential Probability Ratio Test to Sensor Data in IoT

Exploiting CPU Clock Modulation for Covert Communication Channel

Ordinal synchronization mark sequence and its steganography for a multi-link network covert channel

An Identity Authentication Mechanism Based on Timing Covert Channel.

Covert timing channel detection method based on time interval and payload length analysis

I DPID It My Way! A Covert Timing Channel in Software-Defined Networks