CWE-514: Covert Channel

Extended Description

Typically the system has not given authorization for the transmission and has no knowledge of its occurrence.

Confidentiality

Access Control

Read Application Data

Bypass Protection Mechanism

Architecture or Design Review

Effectiveness: SOAR Partial

According to SOAR [REF-1479], the following detection techniques may be useful:

Inspection (IEEE 1028 standard) (can apply to requirements, design, source code, etc.)