Basic Side Effects Related CWEs (Covert Channel)

CWE-385: Covert Timing Channel

  1. Covert timing channels convey information by modulating some aspect of system.

  2. So that the program receiving the information can observe system behavior and infer protected information.

Covert Channels and Discrepancies

CWE-514: A covert channel is a path that can be used to transfer information in a way not intended by the system's designers.

Some relation to Time and State issues as External State can be determined from observation of side effects, or internal state

  • CWE-515: Covert Storage Channel

  • CWE-385: Covert Timing Channel

  • CWE-203: Observable Discrepancy

Last updated