Towards Steganography Detection Through Network Traffic Visualisation

TL;DR

This paper introduces a novel network steganography detection method using traffic visualisation that does not rely on linear time dependencies, demonstrated through a dedicated tool and steg-tomography approach.

Contribution

It is the first to utilize network traffic visualisations for steganalysis, offering a new approach to anomaly detection in network traffic.

Findings

Feasibility demonstrated in steganography environment

Developed a dedicated visualisation tool

Introduced steg-tomography methodology

Abstract

The paper presents initial step toward new network anomaly detection method that is based on traffic visualisation. The key design principle of the proposed approach is the lack of direct, linear time dependencies for the created network traffic visualisations. The method's feasibility is demonstrated in network steganography environment by presenting steg-tomography methodology and developing the dedicated visualisation tool. To authors' best knowledge this is the first utilization of network traffic visualisations for steganalysis purposes.