文章基本信息

标题：Construction and Performance Analysis of Image Steganography-Based Botnet in KakaoTalk Openchat
本地全文：下载
作者：Jaewoo Jeon ; Youngho Cho
期刊名称：Computers
电子版ISSN：2073-431X
出版年度：2019
卷号：8
期号：3
页码：61-74
DOI：10.3390/computers8030061
出版社：MDPI Publishing
摘要：Once a botnet is constructed over the network, a bot master and bots start communicating by periodically exchanging messages, which is known as botnet C&C communication, in order to send botnet commands to bots, collect critical information stored in bots, upgrade software functions of malwares installed in bots, and so on. For this reason, most existing botnet detection techniques focus on monitoring and capturing suspicious communications between the bot master and bots. Meanwhile, botnets continue to evolve to hide their C&C communication. Recently, a novel type of botnet using image steganography techniques and SNS (Social Network Service) platforms, which is known as image steganography-based botnet or stegobotnet, has emerged to make its C&C communications undetectable by existing botnet detection systems. In stegobotnets, image files used in SNSs carry messages (between the bot master and bots) which are hidden in them by using image steganography techniques. In this paper, we first investigate whether major SNS platforms such as KakaoTalk, Facebook, and Twitter can be suitable for constructing image steganography-based botnets. Next, we construct a part of stegobotnet based on KakaoTalk, and conduct extensive experiments including digital forensic analysis (1) to validate stegobotnet C&C communication can be successful in KakaoTalk and (2) to examine its performance in terms of C&C communication reliability.
关键词：botnet; Steganography; Social Network Service; stegobotnet; KakaoTalk botnet ; Steganography ; Social Network Service ; stegobotnet ; KakaoTalk