Detection of StegoBot: a covert social network botnet

Authors:
V. Natarajan;Shina Sheen;R. Anitha
Affiliations:
PSG College of Technology, Coimbatore, India;PSG College of Technology, Coimbatore, India;PSG College of Technology, Coimbatore, India
Venue:
Proceedings of the First International Conference on Security of Internet of Things
Year:
2012

Citing 11
Cited 0

Bagging predictors

Machine Learning
The Random Subspace Method for Constructing Decision Forests

IEEE Transactions on Pattern Analysis and Machine Intelligence
F5-A Steganographic Algorithm

IHW '01 Proceedings of the 4th International Workshop on Information Hiding
An algorithm for anomaly-based botnet detection

SRUTI'06 Proceedings of the 2nd conference on Steps to Reducing Unwanted Traffic on the Internet - Volume 2
Defending against statistical steganalysis

SSYM'01 Proceedings of the 10th conference on USENIX Security Symposium - Volume 10
Embedded Malware Detection Using Markov n-Grams

DIMVA '08 Proceedings of the 5th international conference on Detection of Intrusions and Malware, and Vulnerability Assessment
BotMiner: clustering analysis of network traffic for protocol- and structure-independent botnet detection

SS'08 Proceedings of the 17th conference on Security symposium
YASS: yet another steganographic scheme that resists blind steganalysis

IH'07 Proceedings of the 9th international conference on Information hiding
BotGrep: finding P2P bots with structured graph analysis

USENIX Security'10 Proceedings of the 19th USENIX conference on Security
Stegobot: a covert social network botnet

IH'11 Proceedings of the 13th international conference on Information hiding
The socialbot network: when bots socialize for fame and money

Proceedings of the 27th Annual Computer Security Applications Conference

Quantified Score

Hi-index	0.00

Visualization

Abstract

StegoBot is a recently discovered social network security threat that allows probabilistically unobservable communication through social network. The main aim of a Stegobot is to spread social malware and steal the information from targeted machines. Stegobot takes the advantage of image Steganography to hide the presence of communication within the image sharing behavior of user interaction. In this paper, we present a detection scheme to detect StegoBot. We analyzed different entropies of images to show that image files are generally very sensitive to embedding. Ensemble classification is employed here as a powerful tool that allows fast detection of StegoBot. The power of the proposed framework is demonstrated on different social networks with different evaluation metrics.