Stegobot: a covert social network botnet

作者: Shishir Nagaraja , Amir Houmansadr , Pratch Piyawongwisal , Vijit Singh , Pragya Agarwal

DOI: 10.1007/978-3-642-24178-9_21

关键词: Cutwail botnetBotnetCovertImage sharingComputer scienceCovert channelComputer securityMalwareFlooding (computer networking)Unobservable

摘要: We propose Stegobot, a new generation botnet that communicates over probabilistically unobservable communication channels. It is designed to spread via social malware attacks and steal information from its victims. Unlike conventional botnets, Stegobot traffic does not introduce endpoints between bots. Instead, it based on model of covert social-network overlay - bot botmaster takes place along the edges network. Further, bots use image steganography hide presence within sharing behavior user interaction. show possible design such even with less than optimal routing mechanism as restricted flooding. analyzed real-world dataset members an online Analysis Stegobot's network throughput indicates stealthy is, also functionally powerful capable channeling fair quantities sensitive data victims at tens megabytes every month.

参考文章(30)
Jan Goebel, Thorsten Holz, Rishi: identify bot contaminated hosts by IRC nickname evaluation conference on workshop on hot topics in understanding botnets. pp. 8- 8 ,(2007)
Suresh Singh, James R. Binkley, An algorithm for anomaly-based botnet detection conference on steps to reducing unwanted traffic on internet. pp. 7- 7 ,(2006)
Phil Sallee, Model-Based Steganography international workshop on digital watermarking. pp. 154- 167 ,(2003) , 10.1007/978-3-540-24624-4_12
Richard E. Newman, Ira S. Moskowitz, LiWu Chang, Murali M. Brahmadesam, A Steganographic Embedding Undetectable by JPEG Compatibility Steganalysis information hiding. pp. 258- 277 ,(2002) , 10.1007/3-540-36415-3_17
Younhee Kim, Zoran Duric, Dana Richards, Modified matrix encoding technique for minimal distortion steganography information hiding. pp. 314- 327 ,(2006) , 10.1007/978-3-540-74124-4_21
Brian Rexroad, Anestis Karasaridis, David Hoeflin, Wide-scale botnet detection and characterization conference on workshop on hot topics in understanding botnets. pp. 7- 7 ,(2007)
Kwangsoo Lee, Andreas Westfeld, Sangjin Lee, Category attack for LSB steganalysis of JPEG images international workshop on digital watermarking. pp. 35- 48 ,(2006) , 10.1007/11922841_4
Andreas Westfeld, Sangjin Lee, Generalised category attack: improving histogram-based attack on JPEG LSB embedding information hiding. ,vol. 4567, pp. 378- 391 ,(2007) , 10.1007/978-3-540-77370-2_25
Chi-Yao Hong, Prateek Mittal, Matthew Caesar, Nikita Borisov, Shishir Nagaraja, BotGrep: finding P2P bots with structured graph analysis usenix security symposium. pp. 7- 7 ,(2010)
Andreas Westfeld, F5-A Steganographic Algorithm information hiding. ,vol. 2137, pp. 289- 302 ,(2001) , 10.1007/3-540-45496-9_21