Сибирский федеральный университет

Тип публикации: доклад, тезисы доклада, статья из сборника материалов конференций

Конференция: European Conference on Cyber Warfare and Security (ECCWS); Univ Hertfordshire, Hatfield, ENGLAND; Univ Hertfordshire, Hatfield, ENGLAND

Год издания: 2015

Ключевые слова: steganography, stereotyped patterns, protection from research, moving target defence

Аннотация: The present paper reviews the technology for establishing absolutely indiscernible data transfer channels. The fact of message transfer is only known to the sender and the recipient. Unlike the classical concept of a data transfer channel, in steganography there is no specific container in which transferred information is embedded. The main condition for an absolutely indiscernible data transfer channel is that the volume of information transferred through it should not be greater than the number of hypotheses, which a potential adversary needs to enumerate in order to detect the channel. Hence, even the mere task to detect such channels appears infeasible. Some original solutions, which allow solving technical difficulties in establishing such channels, are reviewed in this paper. One of those solutions is aliasing one channel with another. Eventually even after disclosing the channel in some way we can find information, which is ultimately not the information that had been transferred through the channel. That solution reveals new opportunities for misinformation in cyber wars. Another technical solution is constant modification of the channel's structure and even modification of the rules for changing it. That is after some volume of data has been transferred the channel's structure changes so significantly that it can be regarded as a new channel. That changing process is continuous. In case an eavesdropper somehow acquired the channel's structure at a certain moment in time the next moment the channel will disappear from the eavesdropper as it shall change its structure. An absolutely indiscernible channel was implemented and tested in Facebook social network. It took around 8 hours to transmit the text of this paper. That channel in Facebook network was established by means of two chat bots. Information was transmitted using not the text messages but environment parameters. The parameters used were time delays between reading messages, between replies to messages, appearance of "typing" indicators, etc. Transmission speed of 33 bytes per minute was reached. In case of using other (non-timing) environment parameters a significant increase of a channel's throughput capacity is possible.

Журнал: PROCEEDINGS OF THE 14TH EUROPEAN CONFERENCE ON CYBER WARFARE AND SECURITY (ECCWS-2015)

Номера страниц: 286-293

Место издания: NR READING

Издатель: ACAD CONFERENCES LTD

• Styugin Mikhail (Siberian State Aerosp Univ, Krasnoyarsk, Russia; Siberian Fed Univ, Krasnoyarsk, Russia)

• Web of Science Core Collection
• РИНЦ (eLIBRARY.RU)
• Scopus