Don’t You Touch My Nuts: Information Hiding in Cyber Physical Systems

Wendzel, Steffen; Mazurczyk, Wojciech; Haas, Georg

doi:10.1109/spw.2017.40

Cited by 10 publications

(10 citation statements)

References 9 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Examples: i) modulation of actuator states [33]; ii) modulation of a setpoint in a control command; iii) modulation of ICS configuration data (and its backups) for long-term storage of secret data [113]; iv) modulation of control action states in the controller logic [114]; v) modulation of control signal and state measurements [115] randomization of an Android smartphone (here considered as a cyber-physical device due to its sensors and actuators) to overwrite it with a secret message; iii) an imaginable idea is to replace the randomized bits of the ShadowAuth CAN authentication message with encrypted covert data (cf. [116]); iv) one could potentially apply the idea of replacement of entries in a conditioner buffer from physical processes used in an RNG similarly as described by a work of Evtyushkin et al [117], where the buffer is first replaced by rseeds, followed by an entry that is replaced by the sender or not; v) modulation of high-resolution sensor values affected by random sensor-and/or process noise (c.f.…”

Section: Cps Steganography Sub-taxonomymentioning

confidence: 99%

A Generic Taxonomy for Steganography Methods

Wendzel¹,

Caviglione²,

Mazurczyk³

et al. 2022

Preprint

Self Cite

View full text Add to dashboard Cite

A unified understanding of terms and their applicability is essential for every scientific discipline: steganography is no exception. Being divided into several domains (for instance, text steganography, digital media steganography, and network steganography), it is crucial to provide a unified terminology as well as a taxonomy that is not limited to some specific applications or areas. A prime attempt towards a unified understanding of terms was conducted in 2015 with the introduction of a pattern-based taxonomy for network steganography. Six years later, in 2021, the first work towards a pattern-based taxonomy for steganography was proposed. However, this initial attempt still faced several shortcomings, e.g., the lack of patterns for several steganography domains (the work mainly focused on network steganography and covert channels), various terminology issues, and the need of providing a tutorial on how the taxonomy can be used during engineering and scientific tasks, including the paper-writing process. As the consortium who published this initial 2021-study on steganography patterns, in this paper we present the first comprehensive pattern-based taxonomy tailored to fit all known domains of steganography, including smaller and emerging areas, such as filesystem steganography and cyber-physical systems steganography. Besides, to make our contribution more effective and promote the use of the taxonomy to advance research on steganography, we also provide a thorough tutorial on its utilization. Our pattern collection is available at <a href="https://patterns.ztt.hs-worms.de/" target="_blank">https://patterns.ztt.hs-worms.de</a>.

show abstract

Section: Cps Steganography Sub-taxonomymentioning

confidence: 99%

A Generic Taxonomy for Steganography Methods

Wendzel¹,

Caviglione²,

Mazurczyk³

et al. 2022

Preprint

Self Cite

View full text Add to dashboard Cite

show abstract

“…For instance, in filesystem steganography, the cover object might be a file, unused space in a partially allocated block, cluster distribution of an existing file [14], or an inode [7]. In cyber-physical systems (CPS) steganography, a value might be embedded into a sensor value [32], an actuator state or unused registers [34], or into the control logic of a PLC [15]. Hidden data might even be embedded into the number of cyber-physical events of some machine.…”

Section: Analysis Of Existing Steganography Domainsmentioning

confidence: 99%

“…(1) Reserved/Unused State/Value Modulation: The covert message is embedded by modulating reserved/unused states/values, e.g., 1) overwriting the IPv4 reserved field [12]; 2) modulation of unused registers in embedded CPS equipment [34]. (2) Random Modulation: A (pseudo-)random value or state is replaced with a secret message (that is also following a pseudorandom appearance), e.g., 1) replacing the pseudo-random content of a network header field with encrypted covert content; 2) encoding a secret message in the randomized selection of a starting player in an online chess game.…”

Section: En3 Elements/features Enumerationmentioning

confidence: 99%

A Revised Taxonomy of Steganography Embedding Patterns

Wendzel¹,

Caviglione

Mazurczyk

et al. 2021

Proceedings of the 16th International Conference on Availability, Reliability and Security

Self Cite

View full text Add to dashboard Cite

Steganography embraces several hiding techniques which spawn across multiple domains. However, the related terminology is not unified among the different domains, such as digital media steganography, text steganography, cyber-physical systems steganography, network steganography (network covert channels), local covert channels, and out-of-band covert channels. To cope with this, a prime attempt has been done in 2015, with the introduction of the so-called hiding patterns, which allow to describe hiding techniques in a more abstract manner. Despite significant enhancements, the main limitation of such a taxonomy is that it only considers the case of network steganography.Therefore, this paper reviews both the terminology and the taxonomy of hiding patterns as to make them more general. Specifically, hiding patterns are split into those that describe the embedding and the representation of hidden data within the cover object.This work is licensed under a Creative Commons Attribution International 4.0 License.

show abstract

“…1. Reserved/Unused State/Value Modulation: The covert message is embedded by modulating reserved/unused states/values, e.g., 1) overwriting the IPv4 reserved field [12]; 2) modulation of unused registers in embedded CPS equipment [34].…”

Section: En4 State/value Modulationmentioning

confidence: 99%

A Revised Taxonomy of Steganography Embedding Patterns

Wendzel,

Caviglione,

Mazurczyk

et al. 2021

Preprint

Self Cite

View full text Add to dashboard Cite

Steganography embraces several hiding techniques which spawn across multiple domains. However, the related terminology is not unified among the different domains, such as digital media steganography, text steganography, cyber-physical systems steganography, network steganography (network covert channels), local covert channels, and out-of-band covert channels. To cope with this, a prime attempt has been done in 2015, with the introduction of the socalled hiding patterns, which allow to describe hiding techniques in a more abstract manner. Despite significant enhancements, the main limitation of such a taxonomy is that it only considers the case of network steganography.Therefore, this paper reviews both the terminology and the taxonomy of hiding patterns as to make them more general. Specifically, hiding patterns are split into those that describe the embedding and the representation of hidden data within the cover object.As a first research action, we focus on embedding hiding patterns and we show how they can be applied to multiple domains of steganography instead of be-ing limited to the network scenario. Additionally, we exemplify representation patterns using network steganography. Our pattern collection is available under https://patterns.ztt.hs-worms.de.

show abstract

Don’t You Touch My Nuts: Information Hiding in Cyber Physical Systems

Cited by 10 publications

References 9 publications

A Generic Taxonomy for Steganography Methods

A Generic Taxonomy for Steganography Methods

A Revised Taxonomy of Steganography Embedding Patterns

A Revised Taxonomy of Steganography Embedding Patterns

Contact Info

Product

Resources

About