Development of Methods and Tools for Implementing and Detecting Network Steganography

Elena Revyakina; Andrey Gazizov

doi:10.57239/PJLSS-2025-23.2.00161

Author(s)

Elena Revyakina Don State Technical University, Rostov-on-Don, Russia

Andrey Gazizov Don State Technical University, Rostov-on-Don, Russia

Abstract

The increasing sophistication of cyber threats has led to the exploitation of network steganography, that enables covert data transmission by embedding hidden information within standard network protocols such as ICMP and DNS. Traditional security mechanisms often fail to detect these transmissions, making network steganography a significant risk for data breaches, cyber espionage, and unauthorized communications. The purpose of the article was to develop and implement methods and tools for both embedding and detecting steganographic messages in network traffic; identify hidden data transmission vulnerabilities within service network protocols and propose efficient detection mechanisms that can help mitigate these security risks. A custom-built client-server application was developed using packet generation tools such as WinPcap, SharpPcap, and Packet.NET to analyze the feasibility of embedding and detecting hidden messages in ICMP packets. Various detection techniques, including statistical traffic analysis, machine learning models, and visual anomaly detection, were employed to identify deviations in network behavior. The effectiveness of these techniques was evaluated through controlled experiments. The study found that network steganography alters traffic characteristics in measurable ways, making detection possible. Key indicators of steganographic communication include increased frequency of service packets, unusual packet size distributions, and deviations in traffic flow patterns. The integration of machine learning models significantly improved the accuracy of detecting steganographic transmissions, surpassing traditional statistical methods. The findings demonstrate that steganography detection is achievable through statistical and AI-based analysis. Additionally, the study highlights the dual-use nature of network steganography, emphasizing its potential for both malicious exploitation and secure communications in defense, intelligence, and business applications.

Publication Details

Page(s) 238-248

DOI 10.57239/PJLSS-2025-23.2.00161

Published Journal: Pakistan Journal of Life and Social Sciences, Volume: 23, Issue: 2, Year: 2025

Request the full text from PASTIC

Keywords

Traffic Analysis Attack Network Packets Information Safety Active Intelligence Methods

References

AA Malyuk .2004 .Information security: conceptual and methodological foundations of information protection: a textbook for universities. , : .

AY Shcheglov .2009 .Protection of computer information from unauthorized access. St, : .

BA Anin .2000 .Protection of computer information. , : .

Pavlin DV,Makosii AI,Zhdanov ON .2014 .The network steganography. Implementation of the algorithm RSTEG. Reshetnev Readings, 18(2) : 322-324.

Golubev EA,Emelyanov GV .2019 .Steganography as one of the directions of ensuring information security. T-Comm - Telecommunications and Transport, : 185-186.

Cherckesova L,Revyakina E,Buryakova O,Gazizov A .2024 .Creation of an encryption algorithm resistant to attacks through side channels of leakage. E3S Web of Conferences, 583 : 06011.

Ganzhur MA,Dzyuba YaV .2018 .Features of digital steganography as a method of ensuring data hiding. Problemy sovremennogo pedagogicheskogo obrazovaniya, : 10-15.

Kodatsky N,Revyakina E,Gazizov A,Gunko V. .2024 .Using machine learning to forecast hard drive failures. E3S Web of Conferences, 549 : .

Peskova OYu .2017 .Application of network steganography for protection of the data transferred over the internet. Izvestiya SFEDU. Engineering Sciences, 12(137) : 167.

SV Sorokin .2020 .Development of network applications using the TCP/IP protocol stack: textbook. , : .

TA Belkina .2018 .Analytical review of the use of network steganography for solving information security problems. , 11(197) : 36-44.

VA Galatenko .2006 .Standards of information security: a course of lectures. , : .

Frączek W,Szczypiorski K. .2016 .Perfect undetectability of network steganography. Security and Communication Networks, 9 : 2998-3010.