"The Good, The Bad And The Ugly": Evaluation of Wi-Fi Steganography

TL;DR

This paper introduces a novel evaluation framework for Wi-Fi steganography using the 'moving observer' concept, which assesses undetectability levels and could aid in developing new detection systems.

Contribution

It proposes a new evaluation method for network steganography based on observer mobility, and details the development of the MoveSteg detection system.

Findings

The 'moving observer' approach effectively evaluates undetectability levels.

Wi-Fi steganography techniques vary in detectability under the new framework.

The MoveSteg system offers a promising direction for steganography detection.

Abstract

In this paper we propose a new method for the evaluation of network steganography algorithms based on the new concept of "the moving observer". We considered three levels of undetectability named: "good", "bad", and "ugly". To illustrate this method we chose Wi-Fi steganography as a solid family of information hiding protocols. We present the state of the art in this area covering well-known hiding techniques for 802.11 networks. "The moving observer" approach could help not only in the evaluation of steganographic algorithms, but also might be a starting point for a new detection system of network steganography. The concept of a new detection system, called MoveSteg, is explained in detail.