{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,4]],"date-time":"2026-06-04T15:51:42Z","timestamp":1780588302686,"version":"3.54.1"},"publisher-location":"New York, NY, USA","reference-count":46,"publisher":"ACM","license":[{"start":{"date-parts":[[2021,8,17]],"date-time":"2021-08-17T00:00:00Z","timestamp":1629158400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/501100006360","name":"Bundesministerium f\u00fcr Wirtschaft und Energie","doi-asserted-by":"publisher","award":["FKZ: 1501589A"],"award-info":[{"award-number":["FKZ: 1501589A"]}],"id":[{"id":"10.13039\/501100006360","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2021,8,17]]},"DOI":"10.1145\/3465481.3470075","type":"proceedings-article","created":{"date-parts":[[2021,8,16]],"date-time":"2021-08-16T17:57:21Z","timestamp":1629136641000},"page":"1-11","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":10,"title":["A Systematic Analysis of Covert Channels in the Network Time Protocol"],"prefix":"10.1145","author":[{"given":"Jonas","family":"Hielscher","sequence":"first","affiliation":[{"name":"Multimedia and Security Group, Otto-von-Guericke University Magdeburg, DE"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Kevin","family":"Lamsh\u00f6ft","sequence":"additional","affiliation":[{"name":"Multimedia and Security Group, Otto-von-Guericke University Magdeburg, DE"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Christian","family":"Kr\u00e4tzer","sequence":"additional","affiliation":[{"name":"Multimedia and Security Group, Otto-von-Guericke University Magdeburg, DE"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jana","family":"Dittmann","sequence":"additional","affiliation":[{"name":"Multimedia and Security Group, Otto-von-Guericke University Magdeburg, DE"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2021,8,17]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"crossref","unstructured":"A. Malhotra and S. Goldberg. 2019. Message Authentication Code for the Network Time Protocol. Internet Engineering Task Force (June 2019). https:\/\/www.rfc-editor.org\/rfc\/rfc8573.html.","DOI":"10.17487\/RFC8573"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1145\/3058060.3058082"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"crossref","unstructured":"M. Bishop. 1990. A security analysis of the NTP protocol version 2. In [1990] Proceedings of the Sixth Annual Computer Security Applications Conference. 20\u201329.","DOI":"10.1109\/CSAC.1990.143746"},{"key":"e_1_3_2_1_4_1","first-page":"1","article-title":"An Information-Theoretic Model for","volume":"192","author":"Cachin Christian","year":"2004","unstructured":"Christian Cachin. 2004. An Information-Theoretic Model for Steganography. Inf. Comput. 192, 1 (July 2004), 41\u201356.","journal-title":"Steganography. Inf. Comput."},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2015.2510825"},{"key":"e_1_3_2_1_6_1","volume-title":"Proc SPIE (06","author":"Chandramouli Rajarathnam","year":"2003","unstructured":"Rajarathnam Chandramouli and Nasir Memon. 2003. Steganography Capacity: A Steganalysis Perspective. Proc SPIE (06 2003), 173\u2013177."},{"key":"e_1_3_2_1_7_1","volume-title":"Comparison of NTP implementation. (August","year":"2018","unstructured":"chrony. 2018. Comparison of NTP implementation. (August 2018). https:\/\/chrony.tuxfamily.org\/comparison.html."},{"key":"e_1_3_2_1_8_1","volume-title":"2020 IEEE International Workshop on Metrology for Industry 4.0 IoT. 223\u2013228","author":"Ferrari P.","unstructured":"P. Ferrari, P. Bellagente, A. Depari, A. Flammini, M. Pasetti, S. Rinaldi, and E. Sisinni. 2020. Evaluation of the impact on industrial applications of NTP Used by IoT devices. In 2020 IEEE International Workshop on Metrology for Industry 4.0 IoT. 223\u2013228."},{"key":"e_1_3_2_1_9_1","unstructured":"D. Franke and A. Malhotra. 2019. NTP Client Data Minimization. Internet Engineering Task Force(2019). https:\/\/tools.ietf.org\/id\/draft-ietf-ntp-data-minimization-04.html."},{"key":"e_1_3_2_1_10_1","unstructured":"D. Franke D. Sibold K. Teichel M. Dansarie and R. Sunblad. 2020. Network Time Security. Internet Engineering Task Force (March 2020). https:\/\/tools.ietf.org\/html\/draft-ietf-ntp-using-nts-for-ntp-28."},{"key":"e_1_3_2_1_11_1","volume-title":"Steganography in Digital Media: Principles, Algorithms, and Applications","author":"Fridrich Jessica","unstructured":"Jessica Fridrich. 2009. Steganography in Digital Media: Principles, Algorithms, and Applications (1st ed.). Cambridge University Press, USA.","edition":"1"},{"key":"e_1_3_2_1_12_1","unstructured":"B. Haberman D. Mills and U. Delaware. 2010. Network Time Protocol Version 4: Autokey Specification. Internet Engineering Task Force (June 2010). https:\/\/tools.ietf.org\/html\/rfc5906."},{"key":"e_1_3_2_1_13_1","volume-title":"Proceedings of the 10th Conference on USENIX Security Symposium -","volume":"10","author":"Handley Mark","year":"2001","unstructured":"Mark Handley, Vern Paxson, and Christian Kreibich. 2001. Network Intrusion Detection: Evasion, Traffic Normalization, and End-to-End Protocol Semantics. In Proceedings of the 10th Conference on USENIX Security Symposium - Volume 10 (Washington, D.C.) (SSYM\u201901). USENIX Association, USA, Article 9, 18\u00a0pages."},{"key":"e_1_3_2_1_14_1","volume-title":"International Conference on Nuclear Security","author":"Hildebrandt Mario","year":"2020","unstructured":"Mario Hildebrandt, Robert Altschaffel, Kevin Lamsh\u00f6ft, Matthias Lange, Martin Szemkus, Tom Neubert, Claus Vielhauer, Yongjian Ding, and Jana Dittmann. 2020. Threat analysis of steganographic and covert communication in nuclear I&C systems. In International Conference on Nuclear Security 2020."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/3369412.3395068"},{"key":"e_1_3_2_1_16_1","volume-title":"NTP Kiss-o\u2019-Death Codes. Network Time Protocol (NTP) Parameters (March","author":"Numbers Authority Internet Assigned","year":"2010","unstructured":"Internet Assigned Numbers Authority. 2010. NTP Kiss-o\u2019-Death Codes. Network Time Protocol (NTP) Parameters (March 2010). https:\/\/www.iana.org\/assignments\/ntp-parameters\/ntp-parameters.xhtml."},{"key":"e_1_3_2_1_17_1","volume-title":"Pitfalls of Provably Secure Systems in Internet the Case of Chronos-NTP. In 2020 50th Annual IEEE-IFIP International Conference on Dependable Systems and Networks-Supplemental","volume":"50","author":"Jeitner P.","unstructured":"P. Jeitner, H. Shulman, and M. Waidner. 2020. Pitfalls of Provably Secure Systems in Internet the Case of Chronos-NTP. In 2020 50th Annual IEEE-IFIP International Conference on Dependable Systems and Networks-Supplemental Volume (DSN-S). 49\u201350."},{"key":"e_1_3_2_1_18_1","volume-title":"The Impact of DNS Insecurity on Time. In 2020 50th Annual IEEE\/IFIP International Conference on Dependable Systems and Networks (DSN). 266\u2013277","author":"Jeitner P.","unstructured":"P. Jeitner, H. Shulman, and M. Waidner. 2020. The Impact of DNS Insecurity on Time. In 2020 50th Annual IEEE\/IFIP International Conference on Dependable Systems and Networks (DSN). 266\u2013277."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ifacol.2020.12.258"},{"key":"e_1_3_2_1_20_1","volume-title":"claus Vielhauer, and Jana Dittmann","author":"Lamsh\u00f6ft Kevin","year":"2020","unstructured":"Kevin Lamsh\u00f6ft, Tom Neubert, Mathias Lange, Robert Altschaffel, Mario Hildebrandt, Yongjian Ding, claus Vielhauer, and Jana Dittmann. 2020. Novel Challenges for Anomaly Detection in I&C Networks: Strategic Preparation for the Advent of Information Hiding based Attacks. Atw. Atomwirtschaft 65 (10 2020), 504\u2013508."},{"key":"e_1_3_2_1_21_1","volume-title":"Covert Channels in IPv6","author":"Lucena B.","unstructured":"Norka\u00a0B. Lucena, Grzegorz Lewandowski, and Steve\u00a0J. Chapin. 2006. Covert Channels in IPv6. In Privacy Enhancing Technologies, George Danezis and David Martin (Eds.). Springer Berlin Heidelberg, Berlin, Heidelberg, 147\u2013166."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2015.33"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"crossref","unstructured":"Wojciech Mazurczyk Przemys\u0142aw Szary Steffen Wendzel and Luca Caviglione. 2019. Towards Reversible Storage Network Covert Channels. In Towards Reversible Storage Network Covert Channels.","DOI":"10.1145\/3339252.3341493"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"crossref","unstructured":"Wojciech Mazurczyk Steffen Wendzel and Krzysztof Cabaj. 2018. Towards Deriving Insights into Data Hiding Methods Using Pattern-based Approach. In Towards Deriving Insights into Data Hiding Methods Using Pattern-based Approach.","DOI":"10.1145\/3230833.3233261"},{"key":"e_1_3_2_1_25_1","volume-title":"Mechanisms, Applications, and Countermeasures","author":"Mazurczyk Wojciech","unstructured":"Wojciech Mazurczyk, Steffen Wendzel, Sebastian Zander, Amir Houmansadr, and Krzysztof Szczypiorski. 2016. Background Concepts, Definitions, and Classification in Information Hiding in Communication Networks: Fundamentals, Mechanisms, Applications, and Countermeasures. John Wiley & Sons, Ltd, Chapter\u00a02, 39\u201358."},{"key":"e_1_3_2_1_26_1","volume-title":"Information Hiding in Communication Networks: Fundamentals, Mechanisms, and Applications","author":"Mazurczyk Wojciech","unstructured":"Wojciech Mazurczyk, Steffen Wendzel, Sebastian Zander, Amir Houmansadr, and Krzysztof Szczypiorski. 2016. Information Hiding in Communication Networks: Fundamentals, Mechanisms, and Applications. Wiley-IEEE Press."},{"key":"e_1_3_2_1_27_1","volume-title":"Network Steganography Countermeasures","author":"Mazurczyk Wojciech","unstructured":"Wojciech Mazurczyk, Steffen Wendzel, Sebastian Zander, Amir Houmansadr, and Krzysztof Szczypiorski. 2016. Network Steganography Countermeasures. John Wiley & Sons, Ltd, Chapter\u00a08, 207\u2013242."},{"key":"e_1_3_2_1_28_1","volume-title":"Covert channels in TCP\/IP protocol stack - Extended version-. Central European Journal of Computer Science 4 (06","author":"Mileva Aleksandra","year":"2014","unstructured":"Aleksandra Mileva and Boris Panajotov. 2014. Covert channels in TCP\/IP protocol stack - Extended version-. Central European Journal of Computer Science 4 (06 2014), 45\u201366."},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2021.102207"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"crossref","unstructured":"D. Mills. 2006. Simple Network Time Protocol (SNTP) Version 4 for IPv4 IPv6 and OSI. https:\/\/tools.ietf.org\/html\/rfc4330.","DOI":"10.17487\/rfc4330"},{"key":"e_1_3_2_1_31_1","volume-title":"Control Messages Protocol for Use with Network Time Protocol Version 4. Internet Engineering Task Force (October","author":"Mills D.","year":"2011","unstructured":"D. Mills. 2011. Control Messages Protocol for Use with Network Time Protocol Version 4. Internet Engineering Task Force (October 2011). https:\/\/tools.ietf.org\/id\/draft-odonoghue-ntpv4-control-00.html."},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"crossref","unstructured":"D. Mills J. Martin J. Burbank and W. Kasch. 2010. Network Time Protocol Version 4: Protocol and Algorithms Specification. Internet Engineering Task Force (06 2010). https:\/\/tools.ietf.org\/html\/rfc5905.","DOI":"10.17487\/rfc5905"},{"key":"e_1_3_2_1_33_1","volume-title":"Murdoch and Stephen Lewis","author":"J.","year":"2005","unstructured":"Steven\u00a0J. Murdoch and Stephen Lewis. 2005. Embedding Covert Channels into TCP\/IP. In Information Hiding, Mauro Barni, Jordi Herrera-Joancomart\u00ed, Stefan Katzenbeisser, and Fernando P\u00e9rez-Gonz\u00e1lez (Eds.). Springer Berlin Heidelberg, Berlin, Heidelberg, 247\u2013261."},{"key":"e_1_3_2_1_34_1","volume-title":"How should I provide NTP services for a huge network? (September","author":"NTP FAQ.","year":"2019","unstructured":"NTP FAQ. 2019. How should I provide NTP services for a huge network? (September 2019). https:\/\/www.ntp.org\/ntpfaq\/NTP-s-config-adv.htm."},{"key":"e_1_3_2_1_35_1","volume-title":"TU Braunschweig - Institut f\u00fcr Theoretische Informatik (September","author":"R\u00f6ttger Stephen","year":"2011","unstructured":"Stephen R\u00f6ttger. 2011. Analyse des NTP-Autokey-Verfahrens (German). TU Braunschweig - Institut f\u00fcr Theoretische Informatik (September 2011)."},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/3407023.3409207"},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1002\/j.1538-7305.1948.tb01338.x"},{"key":"e_1_3_2_1_38_1","volume-title":"Stegware \u2013 the latest trend in cybercrime. (February","author":"SIMARGL.","year":"2019","unstructured":"SIMARGL. 2019. Stegware \u2013 the latest trend in cybercrime. (February 2019). https:\/\/simargl.eu\/blog\/technical\/stegware-the-latest-trend-in-cybercrime."},{"key":"e_1_3_2_1_39_1","volume-title":"Best Practices for NTP Services. (April","author":"Snoke Timur","year":"2017","unstructured":"Timur Snoke. 2017. Best Practices for NTP Services. (April 2017). https:\/\/insights.sei.cmu.edu\/sei_blog\/2017\/04\/best-practices-for-ntp-services.html."},{"key":"e_1_3_2_1_40_1","volume-title":"Alternative communication channel over NTP. Virus Bulletin (April","author":"Tsapakis Nikolaos","year":"2019","unstructured":"Nikolaos Tsapakis. 2019. Alternative communication channel over NTP. Virus Bulletin (April 2019). https:\/\/www.virusbulletin.com\/virusbulletin\/2019\/04\/alternative-communication-channel-over-ntp\/."},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1145\/3230833.3233265"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-658-06708-3_9"},{"key":"e_1_3_2_1_43_1","volume-title":"Pattern-Based Survey and Categorization of Network Covert Channel Techniques. Comput. Surveys 47 (04","author":"Wendzel Steffen","year":"2015","unstructured":"Steffen Wendzel, Sebastian Zander, Bernhard Fechner, and Christian Herdin. 2015. Pattern-Based Survey and Categorization of Network Covert Channel Techniques. Comput. Surveys 47 (04 2015), 50:1\u201326."},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1007\/10719724_5"},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2007.4317620"},{"key":"e_1_3_2_1_46_1","first-page":"3","article-title":"Trends","volume":"57","author":"Zieli\u0144ska Elundefinedbieta","year":"2014","unstructured":"Elundefinedbieta Zieli\u0144ska, Wojciech Mazurczyk, and Krzysztof Szczypiorski. 2014. Trends in Steganography. Commun. ACM 57, 3 (March 2014), 86\u201395.","journal-title":"Steganography. Commun. ACM"}],"event":{"name":"ARES 2021: The 16th International Conference on Availability, Reliability and Security","location":"Vienna Austria","acronym":"ARES 2021"},"container-title":["Proceedings of the 16th International Conference on Availability, Reliability and Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3465481.3470075","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3465481.3470075","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T20:17:24Z","timestamp":1750191444000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3465481.3470075"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,8,17]]},"references-count":46,"alternative-id":["10.1145\/3465481.3470075","10.1145\/3465481"],"URL":"https:\/\/doi.org\/10.1145\/3465481.3470075","relation":{},"subject":[],"published":{"date-parts":[[2021,8,17]]},"assertion":[{"value":"2021-08-17","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}