移动僵尸网络的命令与控制信息隐匿技术

Steganography Techniques for Command and Control Information of Mobile Botnet

随着移动互联网的发展和普及,越来越多的攻击者通过移动僵尸网络进行犯罪活动.针对推送型移动僵尸网络,提出了一种拟英文自然语言的移动僵尸网络命令和传输机制,通过基于推送内容的隐写方法,将需要传输的控制指令隐藏于推送文本中,使推送文本拟自然语言化,躲避推送服务提供商的异常检测.实验结果表明,这种拟自然语言隐写方法能够根据语料库动态地提升隐写文本的单词嵌入率,隐写文本自然可读,具有良好的传输效率和隐蔽性.

With the development of mobile Internet,more and more attackers use mobile botnet to commit cyber crimes.A transmission mechanism,where every command for controlling is hidden in human-like message,was proposed for mobile botnet relying on push server.Through the text steganography method,the command which needs to be transmitted is hidden in the human-like pushing text to avoid the anomaly detection.The experimental results show that this steganography mechanism with high transmission efficiency and invisibility dynamically enhances the average covert rate according to the corpus and that the stegotext is readable and natural.