I’m new to snort. I’m trying to set up rules in snort to detect the presence of covert timing channnels. Ideally, I would like use pre-made rules that have like the snort community rules.
So far, I’ve found the snort community ruleset and the emerging threats ruleset but
I couldn’t find anything specific to timing covert channel attacks.
New contributor
jaic is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.