Abstract:In order to protect user privacy or guarantee free access to the Internet, the network covert channel has become a hot research topic. It refers to an information channel in which the messages are covertly transmitted under the network environment. In recent years, many new construction schemes of network covert channels are proposed. But at the same time, network covert channel has also received the attention of censors, leading to many attacks. The network covert channel refers to an information channel in which the messages are covertly transmitted under the network environment. Many users exploit the network covert channel to protect privacy or guarantee free access to the Internet. Previous construction schemes of the network covert channel are based on information steganography, which can be divided into CTCs and CSCs. In recent years, there are some covert channels constructed by changing the transmission network architecture. On the other side, some research work promises that the characteristics of emerging network may better fit the construction of the network covert channel. In addition, the covert channel can also be constructed by changing the transmission network architecture. The proxy and anonymity communication technology implement this construction scheme. In this paper, we divide the key technologies for constructing network covert channels into two aspects: communication content level (based on information steganography) and transmission network level (based on proxy and anonymity communication technology). We give an comprehensively summary about covert channels at each level. We also introduce work for the three new types of network covert channels (covert channels based on streaming media, covert channels based on blockchain, and covert channels based on IPv6). In addition, we present the attacks against the network covert channel, including elimination, limitation, and detection. Finally, the challenge and future research trend in this field are discussed.

Constructing the On/Off Covert Channel on Xen

Identification and Evaluation of Sharing Memory Covert Timing Channel in Xen Virtual Machines

A Covert Channel Using Event Channel State on Xen Hypervisor

Exploring Virtual Machine Covert Channel Via I/O Performance Interference

A Covert Channel Using Core Alternation

An Approach for Secure-Communication Between XEN Virtual Machines

A Covert Timing Channel via Algorithmic Complexity Attacks: Design and Analysis

Investigating Timing Channel in IaaS

A Survey of Key Technologies for Constructing Network Covert Channel

Exploiting CPU Clock Modulation for Covert Communication Channel

Secure Virtual Network Embedding To Mitigate The Risk Of Covert Channel Attacks

IChannels: Exploiting Current Management Mechanisms to Create Covert Channels in Modern Processors

Randhyp: Preventing Attacks Via Xen Hypercall Interface

Isolate Secure Executing Environment for a Safe Cloud.

Virtual Switching Without a Hypervisor for a More Secure Cloud

Architecture support for guest-transparent VM protection from untrusted hypervisor and physical attacks

A Shared Memory Based Cross-Vm Side Channel Attacks In Iaas Cloud

Constructing SDN Covert Timing Channels Between Hosts with Unprivileged Attackers

Study on Virtual Honeynet with Xen Hardware Virtual Machine

Enhanced Privilege Separation for Commodity Software on Virtualized Platform

Cloudvisor: Retrofitting Protection Of Virtual Machines In Multi-Tenant Cloud With Nested Virtualization