Network packet payload parity based steganography

Abdullaziz, Osamah Ibrahiem; Goh, Vik Tor; Ling, Huo-Chong; Wong, KokSheik

doi:10.1109/csudet.2013.6670985

Cited by 19 publications

(6 citation statements)

References 12 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Ultimately, the author concludes that this technique can easily circumvent numerous flow control mechanisms. Abdullaziz [29], in his research, presents a novel approach to steganography using network packet payloads and the concept of payload parity. The study explores the feasibility and effectiveness of this steganographic technique, highlighting its potential applications and implications for network security.…”

Section: Literature Reviewmentioning

confidence: 99%

A Unique Approach for Ex-filtering Sensitive Data Through an Audio Covert Channel in Android Application

K. Shah,

M. Rathod,

Buddhadev

et al. 2024

IJCDS

View full text Add to dashboard Cite

The rapid global evolution of technology has led to a significant shift in the field of cybersecurity. The advent of technologies such as Artificial Intelligence, Machine Learning, Blockchain, and Data Science has significantly increased the complexity and demand for research in the field of cybersecurity. Numerous authors and academics consistently engage in endeavors within this field to enhance existing implementations. Due to this process of evolution, several entities have experienced growth, leading to the transformation of numerous small-scale organizations into large-scale counterparts. The advent of the internet has resulted in significant growth for companies, albeit with divergent outcomes. Researchers are utilizing the internet to advance technological developments, while concurrently, certain individuals persistently seek means to undermine this technology. In conjunction with the proliferation of the internet, mobile phones have acquired a heightened level of sophistication, particularly with the advent of the Android operating system, leading to a shift in the manner in which individuals utilize these devices. As the Android operating system continues to advance, individuals are increasingly embracing and incorporating its features into their daily lives. Nevertheless, there are those that persistently endeavor to discover methods for illicitly extracting information from Android smartphones via a covert communication channel. This work introduces a novel methodology for transmitting confidential data, such as contact information and text messages, utilizing a concealed audio channel. The researchers conducted trials utilizing the most recent Android smartphones and arrived at the conclusion that it is feasible to transmit critical information to Android using this methodology. The experiment was conducted by the authors using various detection techniques, and it was determined that none of these tools are capable of detecting a hidden channel of this nature.

show abstract

Section: Literature Reviewmentioning

confidence: 99%

A Unique Approach for Ex-filtering Sensitive Data Through an Audio Covert Channel in Android Application

K. Shah,

M. Rathod,

Buddhadev

et al. 2024

IJCDS

View full text Add to dashboard Cite

show abstract

“…Abdullaziz et al [25] proposed a covert channel based on network packet length. One packet can carry 1 bit of a covert message.…”

Section: Overviewmentioning

confidence: 99%

An ensemble model to detect packet length covert channels

Elsadig

Gafar

2023

IJECE

View full text Add to dashboard Cite

<span lang="EN-US">Covert channel techniques have enriched the way to commit dangerous and unwatched attacks. They exploit ways that are not intended to convey information; therefore, traditional security measures cannot detect them. One class of covert channels that difficult to detect, mitigate, or eliminate is packet length covert channels. This class of covert channels takes advantage of packet length variations to convey covert information. Numerous research articles reflect the useful use of machine learning (ML) classification approaches to discover covert channels. Therefore, this study presented an efficient ensemble classification model to detect such types of attacks. The ensemble model consists of five machine learning algorithms representing the base classifiers. The base classifiers include naive Bayes (NB), decision tree (DT), support vector machine (SVM), k-nearest neighbor (KNN), and random forest (RF). Whereas, the logistic regression (LR) classifier was employed to aggregate the outputs of the base classifiers and thus to generate the ensemble classifier output. The results showed a good performance of our proposed ensemble classifier. It beats all single classification algorithms, with a 99.3% accuracy rate and negligible classification errors.</span>

show abstract

“…However, this covert channel is based on using the data payload as a carrier of a secret message and it is considered more complicated [25]. In 2013, Abdullaziz et al took a different way by developing two packet length-based covert channels that did not depend on utilizing a shared secret key as previous techniques did [26]. Their covert channels introduce covert traffic that looks very closely like normal traffic, which increases the resistance against detection methods.…”

Section: Related Workmentioning

confidence: 99%

“…This section introduces and describes our proposed approach, which is expected to resolve the packet lengthbased covert channel developed in one study by Abdullaziz et al [26]. For demonstration, this section starts with an illustration of constructing a covert channel that will be used to evaluate our proposed approach since, to our knowledge, to this end, there is no available public dataset for this covert channel.…”

Section: The Proposed Approachmentioning

confidence: 99%

“…A covert channel is constructed based on the covert channel described by Abdullaziz et al [26], which relies on changing the network packet lengths to modulate a secret (covert) message. Each packet length represents one bit of the secret message, in which an even value of a packet length represents '0' and an odd value represents '1'.…”

Section: Constructing a Covert Channelmentioning

confidence: 99%

See 1 more Smart Citation

Packet Length Covert Channels Crashed

Elsadig¹,

Fadlalla²

2018

JCSCM

View full text Add to dashboard Cite

Advanced developments in network security tools and techniques have inspired attackers to find alternative ways to bypass them. A network covert channel is a wide-open door for attackers to leak confidential information or to convey malicious activities without being detected. Moreover, the rapid development in network technology and its applications provides a rich platform for developing different covert channel scenarios. A packet length covert channel is a network illicit communication channel that is featured as one of the most difficult covert channels to detect. It generates a covert traffic that is typically similar to normal traffic; this renders such a channel to be virtually impossible to discover. This paper investigates one type of packet length covert channels which exploits the variation of the network packets' lengths to convey secret messages-this type of covert channels does not need any rules to be distributed prior to the initiation of a covert session as other packet length covert channels need. The paper contributes by presenting an elimination approach to resolve this type of covert channel. This approach is sufficiently capable to completely distort the communication session between any sender and receiver who wish to establish such a covert channel. The proposed approach is successfully tested and validated.

show abstract

Network packet payload parity based steganography

Cited by 19 publications

References 12 publications

A Unique Approach for Ex-filtering Sensitive Data Through an Audio Covert Channel in Android Application

A Unique Approach for Ex-filtering Sensitive Data Through an Audio Covert Channel in Android Application

An ensemble model to detect packet length covert channels

Packet Length Covert Channels Crashed

Contact Info

Product

Resources

About