MoveSteg: A Method of Network Steganography Detection
This addresses network security for administrators by detecting covert communication channels, but appears incremental as it builds on existing steganography detection methods.
The authors tackled the problem of detecting the source of time-based network steganography, where hidden information is sent by delaying packets in multimedia streams, and presented a method called MoveSteg that identifies the source within a managed network.
This article presents a new method for detecting a source point of time based network steganography - MoveSteg. A steganography carrier could be an example of multimedia stream made with packets. These packets are then delayed intentionally to send hidden information using time based steganography methods. The presented analysis describes a method that allows finding the source of steganography stream in network that is under our management.