利用不适当的帧填充进行信息隐藏
Information Hiding Using Improper Frame Padding
摘要：
在网络流量中隐藏信息可能导致机密信息的泄漏。在本文中，我们介绍了一种新的隐写系统：PadSteg（填充隐写术）。据作者所知，这是第一个信息隐藏解决方案，它代表了协议间隐写术，即使用TCP/IP协议栈中两个或多个协议之间的关系来实现秘密通信。PadSteg利用ARP和TCP协议以及Etherleak漏洞（不正确的以太网帧填充）来促进LAN（局域网）中隐藏组的秘密通信。基于真实的网络痕迹，我们确认，PadSteg是可行的，在今天的网络，我们估计什么样的隐写带宽是可以实现的，同时限制披露的机会。我们还指出了针对PadSteg的可能对策。
英文摘要：
Hiding information in network traffic may lead to leakage of confidential information. In this paper we introduce a new steganographic system: the PadSteg (Padding Steganography). To authors' best knowledge it is the first information hiding solution which represents interprotocol steganography i.e. usage of relation between two or more protocols from the TCP/IP stack to enable secret communication. PadSteg utilizes ARP and TCP protocols together with an Etherleak vulnerability (improper Ethernet frame padding) to facilitate secret communication for hidden groups in LANs (Local Area Networks). Basing on real network traces we confirm that PadSteg is feasible in today's networks and we estimate what steganographic bandwidth is achievable while limiting the chance of disclosure. We also point at possible countermeasures against PadSteg.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
