A Crypto-Steganography Approach for Hiding Ransomware within HEVC Streams in Android IoT Devices

Abstract

Steganography is a vital security approach that hides any secret content within ordinary data, such as multimedia. This hiding aims to achieve the confidentiality of the IoT secret data; whether it is benign or malicious (e.g., ransomware) and for defensive or offensive purposes. This paper introduces a hybrid crypto-steganography approach for ransomware hiding within high-resolution video frames. This proposed approach is based on hybridizing an AES (advanced encryption standard) algorithm and LSB (least signification bit) steganography process. Initially, AES encrypts the secret Android ransomware data, and then LSB embeds it based on random selection criteria for the cover video pixels. This research examined broad objective and subjective quality assessment metrics to evaluate the performance of the proposed hybrid approach. We used different sizes of ransomware samples and different resolutions of HEVC (high-efficiency video coding) frames to conduct simulation experiments and comparison studies. The assessment results prove the superior efficiency of the introduced hybrid crypto-steganography approach compared to other existing steganography approaches in terms of (a) achieving the integrity of the secret ransomware data, (b) ensuring higher imperceptibility of stego video frames, (3) introducing a multi-level security approach using the AES encryption in addition to the LSB steganography, (4) performing randomness embedding based on RPS (random pixel selection) for concealing secret ransomware bits, (5) succeeding in fully extracting the ransomware data at the receiver side, (6) obtaining strong subjective and objective qualities for all tested evaluation metrics, (7) embedding different sizes of secret data at the same time within the video frame, and finally (8) passing the security scanning tests of 70 antivirus engines without detecting the existence of the embedded ransomware.

WITHDRAWN: Hybrid Architecture for Secure Data Communication Within the Private Cloud

“…With this method, sensitive data is shielded from intrusive users or outsiders. An algorithm was developed by [4] study to protect data from unauthorised users. As an alternative to the previously used least signi cant bit (LSB) strategy, they presented a system.…”

“…3 The key round encryption technique, which is implemented in Python yields the expected proposed algorithm for KREA shown in detail in Figs. 4 The key round encryption technique, which is implemented in Python yields the expected proposed Algorithm User interface shown in detail in Figs. 5.…”

NTFS+: An Enhanced NTFS File System Against Ransomware Invasions

“…Studies in the realm of ransomware detection have extensively concentrated on pinpointing specific attack patterns and atypical behaviors within file systems [11], [21], [22]. A prominent strategy in this field has been the deployment of machine learning algorithms, which scrutinize file access patterns to pinpoint irregular encryption activities that are typically indicative of ransomware infiltration [5], [23], [8]. These algorithms are trained on vast datasets to accurately distinguish between normal operations and potential ransomware threats [17], [24], [25].…”

“…However, recent developments have seen ransomware adopting more sophisticated encryption techniques, making it increasingly challenging to recover the affected data without yielding to the ransom demands [5], [6]. This alarming trend underscores a shift in the mode of operation of ransomware attacks, evolving from mere nuisances to significant threats capable of crippling entire organizational operations [7], [8]. The impact of these attacks has been profound, with businesses and institutions facing not just financial losses due to the ransom payments but also significant operational disruptions and potential breaches of sensitive data [9], [1].…”

A crypto-steganography scheme for IoT applications based on bit interchange and crypto-system

“…The rapid development of IoT applications makes communication and transmission security issues more attractive. Therefore, it is necessary to implement effective security and confidentiality technology to transmit IoT [2]. Such security can be provided using security features such as information security techniques (steganography and encryption) with IoT systems [3].…”