Steganography for Cyber-physicalSystems

Wendzel, Steffen; Mazurczyk, Wojciech; Haas, Georg

doi:10.13052/jcsm2245-1439.621

Cited by 10 publications

(2 citation statements)

References 14 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Attacks on IoT devices also allow user profiling, and maliciously interfering with the physical world. Moreover, malware can utilize the IoT to hide secret data [11], for instance, an attacker can secretly store data in unused registers of IoT devices or by slightly modifying actuator states [12].…”

Section: The Road Aheadmentioning

confidence: 99%

The New Threats of Information Hiding: The Road Ahead

et al. 2018

Self Cite

View full text Add to dashboard Cite

Compared to cryptography, steganography is a less discussed domain. However, there is a recent trend of exploiting various information hiding techniques to empower malware, for instance to bypass security frameworks of mobile devices or to exfiltrate sensitive data. This is mostly due to the need to counteract increasingly sophisticated security mechanisms, such as code analysis, runtime countermeasures, or real-time traffic inspection tools. In this perspective, this paper presents malware exploiting information hiding in a broad sense, i.e., it does not focus on classical covert channels, but also discusses other camouflage techniques. Differently from other works, this paper solely focuses on real-world threats observed in the 2011 -2017 timeframe. The observation indicates a growing number of malware equipped with some form of data hiding capabilities and a lack of effective and universal countermeasures.

show abstract

Section: The Road Aheadmentioning

confidence: 99%

The New Threats of Information Hiding: The Road Ahead

et al. 2018

Self Cite

View full text Add to dashboard Cite

show abstract

“…Most recently, covert channels in the Internet of Things has gained increasing attention, cf. works by Mileva et al [28], Wendzel et al [29] and Hildebrandt et al [30].…”

Section: Related Workmentioning

confidence: 99%

Reversible and Plausibly Deniable Covert Channels in One-Time Passwords Based on Hash Chains

Keller

Wendzel

2021

Applied Sciences

Self Cite

View full text Add to dashboard Cite

Covert channels enable stealthy communications over innocent appearing carriers. They are increasingly applied in the network context. However, little work is available that exploits cryptographic primitives in the networking context to establish such covert communications. We present a covert channel between two devices where one device authenticates itself with Lamport’s one-time passwords based on a cryptographic hash function. Our channel enables plausible deniability jointly with reversibility and is applicable in different contexts, such as traditional TCP/IP networks, CPS/IoT communication, blockchain-driven systems and local inter-process communications that apply hash chains. We also present countermeasures to detect the presence of such a covert channel, which are non-trivial because hash values are random-looking binary strings, so that deviations are not likely to be detected. We report on experimental results with MD5 and SHA-3 hash functions for two covert channel variants running in a localhost setup. In particular, we evaluate the channels’ time performance, conduct statistical tests using the NIST suite and run a test for matching hash values between legitimate and covert environments to determine our channels’ stealthiness.

show abstract

Sicherheit im Internet der Dinge

Wendzel¹

2018

IT-Sicherheit Für TCP/IP- Und IoT-Netzwerke

View full text Add to dashboard Cite

Steganography for Cyber-physicalSystems

Cited by 10 publications

References 14 publications

The New Threats of Information Hiding: The Road Ahead

The New Threats of Information Hiding: The Road Ahead

Reversible and Plausibly Deniable Covert Channels in One-Time Passwords Based on Hash Chains

Sicherheit im Internet der Dinge

Contact Info

Product

Resources

About