M. A. Finoshin, I. D. Ivanova, I. Yu. Zhukov, A. V. Zuikov
{"title":"Memory-Based Covert Channels in the TLS Protocol","authors":"M. A. Finoshin, I. D. Ivanova, I. Yu. Zhukov, A. V. Zuikov","doi":"10.3103/S0146411625700853","DOIUrl":null,"url":null,"abstract":"<p>Methods of protection against memory-based covert channels in the TLS protocol, which use the Random and SessionID service fields of the ClientHello message, are proposed. Protection tools implementing the proposed methods are developed: a module for the Suricata IDS/IPS that filters TLS packets depending on the contents of the SessionID service field, and a proxy server that reformats packets transmitted into the communication environment. A comparative analysis of the implemented security tools is carried out in terms of their impact on the communication channel throughput and their effectiveness in countering the transmission of confidential information. The developed protection tools can be implemented into existing systems for protection against network covert channels. Recommendations are provided for the application of the proposed protection mechanisms, depending on the desired level of security.</p>","PeriodicalId":46238,"journal":{"name":"AUTOMATIC CONTROL AND COMPUTER SCIENCES","volume":"59 8","pages":"1315 - 1321"},"PeriodicalIF":0.5000,"publicationDate":"2026-02-24","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"AUTOMATIC CONTROL AND COMPUTER SCIENCES","FirstCategoryId":"1085","ListUrlMain":"https://link.springer.com/article/10.3103/S0146411625700853","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q4","JCRName":"AUTOMATION & CONTROL SYSTEMS","Score":null,"Total":0}
引用次数: 0
Abstract
Methods of protection against memory-based covert channels in the TLS protocol, which use the Random and SessionID service fields of the ClientHello message, are proposed. Protection tools implementing the proposed methods are developed: a module for the Suricata IDS/IPS that filters TLS packets depending on the contents of the SessionID service field, and a proxy server that reformats packets transmitted into the communication environment. A comparative analysis of the implemented security tools is carried out in terms of their impact on the communication channel throughput and their effectiveness in countering the transmission of confidential information. The developed protection tools can be implemented into existing systems for protection against network covert channels. Recommendations are provided for the application of the proposed protection mechanisms, depending on the desired level of security.
期刊介绍：
Automatic Control and Computer Sciences is a peer reviewed journal that publishes articles on• Control systems, cyber-physical system, real-time systems, robotics, smart sensors, embedded intelligence • Network information technologies, information security, statistical methods of data processing, distributed artificial intelligence, complex systems modeling, knowledge representation, processing and management • Signal and image processing, machine learning, machine perception, computer vision
求助内容：
应助结果提醒方式：
京公网安备 11010802042870号
