Two secure online steganography schemes based on HTTP request sequences

Leonel Moyou Metcheka (1, 2) , Stephane Gael Raymond Ekodeck (1, 2) , René Ndoundam (1, 2)

1 UMMISCO - Unité de modélisation mathématique et informatique des systèmes complexes [Bondy]
2 Département d’informatique, Université de Yaoundé I, Cameroun

The interest of steganography is to find ways to leak confidential information without being detected. Several methods proposed in the literature implement strategies for secret embedding in one or more covert media with increased security performance, by enhancing alteration resistance. Nevertheless, these embedding strategies are vulnerable to detection with blind universal steganalysis. This paper sheds light on two new secure covert channels, perfectly driven by online web operations that do not leave fingerprints. The design features of this undetectable scheme are based on lightweight requests for secret encoding coupled to the cover media independence. Experiments on this new approach have shown remarkable security results compared to existing ones. The results are significant and present promising research contributions.

Mots clés: Undetectability; Lightweight covert channel; Tagged URLs; HTTP request sequences; Undetectability

Domaines: Cryptographie et sécurité [cs.CR]; Réseaux et télécommunications [cs.NI]

Leonel Moyou Metcheka, Stephane Gael Raymond Ekodeck, René Ndoundam. Two secure online steganography schemes based on HTTP request sequences. 2022. ⟨hal-03706829⟩