I'm new to snort. I'm trying to set up rules in snort to detect the presence of covert timing channels. Ideally, I would like to use pre-made rules like the snort community rules.
So far, I've found the snort community ruleset and the emerging threats ruleset but I couldn't find anything specific to timing covert channel attacks.
