Covert Channel

A covert channel is a path that can be used to transfer information in a way not intended by the system's designers.

Soyutlama

Class

Yapı

Simple

Sömürü İhtimali

Medium

Problemi anla

Problem nedir?

A covert channel is a path that can be used to transfer information in a way not intended by the system's designers.

Genişletilmiş açıklama

Typically the system has not given authorization for the transmission and has no knowledge of its occurrence.

Kök neden

Problem nasıl ve ne zaman oluşur?

Yaşam döngüsü evresi

Implementation

Yaşam döngüsü evresi

Operation

Risk

Başarılı sömürü neye yol açar?

Read Application DataBypass Protection Mechanism

Etkilenen güvenlik alanları: Confidentiality, Access Control

Savunma

Nasıl önlenir ve çözülür?

Follow secure coding guidelines for input handling and boundary checking.
Enforce strict security reviews and automated static analysis (SAST) checks.

Doğrulama

Nasıl tespit edilir?

Architecture or Design Review

SOAR Partial

According to SOAR [REF-1479], the following detection techniques may be useful: ``` Cost effective for partial coverage: ``` Inspection (IEEE 1028 standard) (can apply to requirements, design, source code, etc.)