Network Steganography in the DNS Protocol

• Autorzy: Drzymała M. , Szczypiorski K. , Urbański M. Ł.

Identyfikatory

DOI

10.1515/eletel-2016-0047

• Języki publikacji: EN

Abstrakty

EN

This paper presents possibility of using of the DNS (Domain Name System) protocol for creating a simplex communication channel between a malware-infected computer with a compromised DNS server. The proposed channel can be used to steal data or confidential enterprise information secretly.

Słowa kluczowe

EN

DNS; network steganography; malware

• Wydawca: Polish Academy of Sciences, Committee of Electronics and Telecommunication
• Czasopismo: International Journal of Electronics and Telecommunications
• Rocznik: 2016
• Tom: Vol. 62, No. 4
• Strony: 343--346
• Opis fizyczny: Bibliogr. 7 poz.

Twórcy

autor

Drzymała M.

• Warsaw University of Technology, Warsaw, Poland

autor

Szczypiorski K.

• Warsaw University of Technology, Warsaw, Poland

autor

Urbański M. Ł.

• Warsaw University of Technology, Warsaw, Poland

Bibliografia

• [1] Fridrich, J., “Applications of Data Hiding in Digital Images”. Tutorial for The ISSPA’99, Brisbane, Australia (August 22-25, 1999).
• [2] Altalhi A. H., Ngadi M. A., Omar S. N., Sidek Z. M., “DNS ID Covert Channel based on Lower Bound Steganography for Normal DNS ID Distribution”. International Journal of Computer Science Issues (IJCSI), 8(6), 2011.
• [3] Mazurczyk, W., Wendzel, S., Zander, S., Houmansadr., A., Szczypiorski, K., “Information Hiding in Communication Networks: Fundamentals, Mechanisms, Applications, and Countermeasures”, Wiley-IEEE Press; 1 edition, February 2016.
• [4] Van Leijenhorst, T., Kwan-Wu. C., Lowe, D., “On the viability and performance of DNS tunneling”. The 5th International Conference on Information Technology and Applications (ICITA 2008), Cairns, Australia, (June 23-26 2008).
• [5] Zielińska, E., Mazurczyk, W., and Szczypiorski, K. (2014). Trends in steganography. Communications of the ACM, 57(3), 86-95.
• [6] Mehic, M., Voznak M., Safarik J., Partila P., Mikulec M.. 2014. “Using DNS amplification DDoS attack for hiding data”. Proc. SPIE 9120, Mobile Multimedia/Image Processing, Security, and Applications 2014, 91200R (May 22 2014).
• [7] The TCP/IP Guide. Accessed on: 11th on June 2016. http://www.tcpipguide.com/.

Uwagi

PL

Opracowanie ze środków MNiSW w ramach umowy 812/P-DUN/2016 na działalność upowszechniającą naukę.