Network based intrusion detection to detect steganographic communication channels: on the example of audio data
Network based intrusion detection to detect steganographic communication channels: on the example of audio data
复制标题
DOI：
10.1109/mmsp.2004.1436563
复制
发表时间：
2004
期刊：
影响因子：
--
通讯作者：
J. Dittmann;D. Hesse
中科院分区：
文献类型：
--
作者：
J. Dittmann;D. Hesse
由于授权用户之间在互联网上交换多媒体数据的性质，控制未经授权的信息流是最困难的任务之一。在保密要求和安全漏洞方面，隐写术为攻击者提供了一种工具，通过将秘密信息嵌入到无害的通信通道中，即所谓的掩护数据，来隐藏通信。由于音频隐写技术的改进，使得信息泄露在很多应用中成为可能。在本文中，我们研究了IP语音应用和入侵检测系统，以检测隐藏的通信通道。除了音频捕获的一般应用场景和性能外，我们还介绍了两个语音隐写分析分类器：一个用于MP3Stego，一个用于StegHide。我们的第一个测试是基于对捕获的语音数据的离线分析。
Due to the nature of multimedia data exchange over the Internet between authorized users, one of the most difficult tasks is to control unauthorized information flow. With respect to confidentiality requirements and breaches in security, steganography offers an instrument for attackers to hide a communication by embedding the secret message into an innocuous communication channel, the so-called cover data. Due to the improvements of audio steganography, disclosure of information becomes possible for a lot of applications. In our paper we investigate voice-over-IP applications and intrusion detection systems (IDS) to detect hidden communication channels. Besides an general application scenario and performance of audio capturing, we introduce two steganalysis classifier for speech: one for MP3Stego and one for Steghide. Our first tests are based on an offline analysis of captured speech data.