Using DNS amplification DDoS attack for hiding data

M. Mehić; M. Voznak; J. Safarik; P. Partila; M. Mikulec

doi:10.1117/12.2050700

22 May 2014 Using DNS amplification DDoS attack for hiding data

M. Mehić, M. Voznak, J. Safarik, P. Partila, M. Mikulec

Proceedings Volume 9120, Mobile Multimedia/Image Processing, Security, and Applications 2014; 91200R (2014) https://doi.org/10.1117/12.2050700
Event: SPIE Sensing Technology + Applications, 2014, Baltimore, MD, United States

Abstract

This paper concerns available steganographic techniques that can be used for sending hidden data through public network. Typically, in steganographic communication it is advised to use popular/often used method for sending hidden data and amount of that data need to be high as much as possible. We confirmed this by choosing a Domain Name System (DNS) as a vital protocol of each network and choosing Distributed denial of service (DDoS) attacks that are most popular network attacks currently represented in the world. Apart from characterizing existing steganographic methods we provide new insights by presenting two new techniques. The first one is network steganography solution which exploits free/unused protocols fields and is known for IP, UDP or TCP protocols, but has never been applied to DNS (Domain Name Server) which are the fundamental part of network communications. The second explains the usage of DNS Amplification DDoS Attack to send seamlessly data through public network. The calculation that was performed to estimate the total amount of data that can be covertly transferred by using these technique, regardless of steganalysis, is included in this paper.

Citation Download Citation

M. Mehić, M. Voznak, J. Safarik, P. Partila, and M. Mikulec "Using DNS amplification DDoS attack for hiding data", Proc. SPIE 9120, Mobile Multimedia/Image Processing, Security, and Applications 2014, 91200R (22 May 2014); https://doi.org/10.1117/12.2050700

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available