Date Added: Jul 2010
The NRL Network Pump R, or Pump, is a standard for mitigating covert channels that arise in a Multi-Level Secure (MLS) system when a High User (HU) sends acknowledgements to a Low User (LU). The issue here is that HU can encode information in the "Timings" of the acknowledgements. The Pump aims at mitigating the covert timing channel by introducing buffering between HU and LU, as well as adding noise to the acknowledgment timings. Here, for the first time, the authors model the workings of the Pump in certain situations, as a communication system with feedback and use then this novel perspective to derive an upper bound on the rate of the covert channel between HU and LU in the Pump, in specific situations.