According to one method for detecting a hidden shared dependency through covert channels, a pattern of bursts is transmitted to a first application hosted by a first server. The pattern of bursts may be designed to stress a potential hidden dependency shared by the first application and a second application hosted by a second server. Each of the bursts may include one or more concurrent requests. Probe requests are transmitted to the second application. Responses corresponding to the probe requests are received from the second application. Response times are determined by computing a difference between times that the probe requests are transmitted and times that the corresponding responses are received. A determination is made whether the potential hidden dependency exists based on the response times.