Weaknesses of Detection Algorithms for Network Element Positioning / Inter-packet Times Pattern

Aug 15, 2023

When network packets are timed to create a timing covert channel, we consider this as a type of Network Element Positioning (as the network packet is positioned in time). In the network-specific taxonomy this is called an Inter-packet Times Pattern.

In recent work, we have now conducted an analysis of two popular detection heuristics and two state-of-the-art machine learning-based detection approaches for such network timing covert channels. The early-access version of the paper is available for download and will appear in IEEE Trans. Dependable and Secure Computing (TDSC).

Upcoming EURASIP Webinar

Jun 09, 2023

EURASIP organizes a webinar on 19th of October, where Prof. Steffen Wendzel will speak about recent developments in network information hiding. More details can be found on the webinar page.

Visit at Warsaw Technical University (WUT)

Apr 28, 2023

Prof. Wendzel (left) and the two PhD students Sebastian Zillien and Laura Hartmann of HS Worms visited Prof. Mazurczyk (right) at the Warsaw Technical University (WUT) in Poland for three days to work jointly on the patterns project.

Talk at Cyberagentur

April 5, 2023

Today, Prof. Wendzel reported about the patterns project at the Cyberagentur in Halle, Germany. The slides of the talk are available here.

Talk at CentraleSupélec

April 2, 2023

Prof. Wendzel recently gave a talk at the CentraleSupélec in Rennes, France, to visit colleague Prof. Lalande and give a talk on the patterns project.

The recording of the talk is available here.

Upcoming Talks

March 16, 2023

There are two upcoming talks in France (CentraleSupélec, Rennes) and Germany (Cyberagentur, online) on our hiding patterns taxonomy, see list of talks.

New Paper: Avoiding Research Tribal Wars Using Taxonomies

January 7, 2023

We published a generic paper with lessons learned from developing a new taxonomy: Avoiding Research Tribal Wars Using Taxonomies, IEEE Computer, 2023.

Website Updated

October 4, 2022

We incorporated the 2021-taxonomy version as well as the 2015-taxonomy version into this website so that it can serve as the sole source on steganography hiding patterns now (all other websites are obsolete now).

Keynote Talk at CUING’22 Workshop, Vienna

August 24, 2022

Prof. Wendzel during CUING workshop keynote speech

Professor Wendzel presented the consortium’s latest draft of the steganography taxonomy during a keynote speech at the CUING workshop (part of the ARES conference) in Vienna.

New Taxonomy Revision Made Available

July 15, 2022

A heavily revised version of the steganography hiding patterns taxonomy is now available as a pre-print. This work will also be presented at the CUING workshop at the ARES conference in August.

Taxonomy for Indirect Network-based Steganography

Tobias Schmidbauer presented a survey paper on indirect network covert channels which already uses the ARES’21-taxonomy (see news entry below) and adds new and specific patterns for indirect covert communications. The paper can be found here. Note: These patterns for indirect covert communications can be applied to the most recent version of the steganography hiding patterns, too.

ARES’21 Presesentation

August 18, 2021

The video, slides (see Chapter 5b here) and the paper of our CUING’21 presentation at ARES are now published.

Video presentation of CUING'21 (extended version)

Website Lanched!

June 13, 2021

Our new project website was initially launched and our new paper was made available!