Covert Message Channels and Attack Vectors for IEEE Precision Time Protocol
2022 IEEE International Symposium on Precision Clock Synchronization for Measurement, Control, and Communication (ISPCS)(2022)
摘要
The IEEE 1588 standard, known as Precision Time Protocol (PTP), is an emerging candidate for high precision timing and clock distribution networks. We present experimental results from a PTP test bed that demonstrate new types of covert channel communications, which allow PTP protocol to be used for data exfiltration and other network communication that violates the implemented cybersecurity policy. We then expand upon this work to demonstrate two new zero-day vulnerabilities in the PTP protocol, and develop proof-of-concept exploits for these attacks. In one attack, we demonstrate a novel man-in-the-middle (MITM) packet injection exploit against the PTP network that produces large, incorrect timing offsets at PTP timeReceiver nodes. In a second attack, we demonstrate the use of specific meta-data payloads to generate large time Transmitter (i.e. master clock) offsets, and to manipulate not just the clock offset but the actual clock frequency itself. We also investigate proposed mitigation techniques, including the use of NTS secured NTP with PTP concurrently which is suggested by some of our experimental results using Timemaster.
更多查看译文
关键词
PTP,NTP,timing,cybersecurity
AI 理解论文
溯源树
样例
生成溯源树,研究论文发展脉络
Chat Paper
正在生成论文摘要