Exam CISSP topic 1 question 183 discussion

Storage channels are used by attackers to encode the information getting transferred and then decode it later. In TCP/IP stacks, some fields are left vacant or unused. Attackers utilize these unused fields as storage channels.

Storage. C

Covert Channel types: Timing or Storage

In the context of computer security, covert channels typically refer to timing and storage covert channels. So, the correct answer is: C. Storage

Two types of covert channels: covert storage and covert timing. • A covert storage channel is used when one process writes data to a hard drive and another process reads it. In a covert storage attack, a higher-level subject writes data to a storage area and a lower subject reads it. In a covert storage channel, security risks arise due to the storage location. • A covert timing channel is used when a process transmits data to another process. Covert timing channels convey information by modifying the timing of a system resource in some measurable way.

According to the official study guide, there are only two types of covert channels: timing and storage. Since the question is about a covert channel TYPE, the only valid response is "storage" (C). All other options are not a covert channel types and thus are incorrect. While a pipe can be used as a communication mechanism between processes, it is not a covert channel type in the context of computer security. Therefore, the only valid response to this question is "storage" (C), as it is the only option that represents a covert channel type.

A covert channel is a way for unauthorized information to be transferred between two entities that are not supposed to be able to communicate with each other. There are two main types of covert channels: storage channels and timing channels. Storage channels use shared storage space, such as a hard drive, to transfer information. For example, an attacker could create a hidden file on the hard drive and then modify the file to encode the information they want to transfer. Timing channels use the timing of system events to transfer information. For example, an attacker could measure the time it takes for a system to perform a certain task and then use that information to transfer data.

It is C, as storage, timing-based, and behavior are the three types of covert channels: https://medium.com/insa-tc/covert-channels-in-computer-networks-26a33fd911b2

will go with C Storage-based covert channels. This involves hiding data in some unexpected portion of the message Timing-based covert channels. Time is a parameter, it was used in morse code, so why not use it in packet based networks to create a covert channel

A.Pipe A pipe is a type of covert channel that can be used to transfer information between two processes in a way that is not easily detectable by system administrators or security personnel. Covert channels are communication channels that are not intended to be used for information transfer, but can still be used to transfer information due to weaknesses or limitations in the system security mechanisms. Pipes are a common type of covert channel that can be used to transfer information between two processes on the same system by writing to and reading from a shared pipe file.

B. Memory A covert channel is a type of communication channel that allows two processes to communicate in a way that is not intended or visible to an observer. Memory is one example of a covert channel, as two processes can share information by writing to and reading from shared memory, without the observer being aware of it. Other examples of covert channels include timing channels, where two processes communicate by modulating the time of certain events, and storage channels, where they communicate by writing and reading data to and from shared storage devices.

This is simply a knowledge question from the official study guide 9th edition

Storage - https://study.com/academy/lesson/covert-communication-channels-definition-issues-tunneling.html

storage and timing

The existence of a covert storage channel in a communications channel may release information which can be of significant use to attackers. https://owasp.org/www-community/vulnerabilities/Covert_storage_channel

D because all the other ones follow strict rules for manipulating data. Creating a covert channel using monitoring must be very smart. I never actually heard about it before, but now that I know about it, sounds very tricky and smart.

storage and timing