Lab Lunch: 23 January 2018 - Yuhui Lin

Title: Modelling and Analysing a covert-channel attack and mitigations using timed automata 

Abstract:

Attackers can exploit covert channels, such as timingside-channels, to transmit information without data owners or network administrators being aware. Sneak-Peek is a recently considered datacentre attack, where, in a multi-tenant setting, an insider attacker can communicate with colluding outsiders by intentionally adding delays to traffic on logically isolated but physically shared links. We model the Sneak-Peek attack and mitigations using timed automata in UPPAAL. The formal model can be used to check the feasibility of the attack, and analyse effectiveness of the mitigations.