stegano.net
is a project focused on the network steganography. Since 2002 our efforts provide innovations in data hiding for existing networks including wireless LANs and Voice over IP communication (VoIP). We believe that our solutions may exist in networks like the chameleons in the nature. We also try to examine network traffic for possible subliminal channels or anomaly behaviour.

stegano.net is a home of HICCUPS, LACK, RSTEG and Steg Router. We are still working on brand new ideas (coming soon)... No more secrets, even though the truth is out there ;).

We introduced to the English dictionary and the state of the art some wordings: network steganography, steganophony, steganophone, and hiccups.

Project members:

Staff

Krzysztof Szczypiorski
, PhD (project leader)
Wojciech Mazurczyk, PhD (project co-leader)
Prof. Józef Lubacz, DSc, PhD (principal scientific advisor)
Krzysztof Cabaj, PhD
Paweł Radziszewski, MSc

BSc/MSc students

Miłosz Smolarczyk
Maciej Kreft

We are the team called Network Security Group from Warsaw University of Technology, Poland

We are the proud organizers of:
First International Workshop on Network Steganography - IWNS 2009
18–20 November, 2009 in Wuhan, Hubei, China
co-located with
International Conference on Multimedia Information Networking and Security (MINES 2009)

 

 
Our publications


Wireless steganography (HICCUPS)

1. Krzysztof Szczypiorski
HICCUPS: Hidden Communication System for Corrupted Networks
In Proc. of: The Tenth International Multi-Conference on Advanced Computer Systems ACS'2003, pp. 31-40, October 22-24, 2003 - Międzyzdroje, Poland [.pdf] + [paper presentation .pdf] - Citation index by Google

2. Krzysztof Szczypiorski
Steganography in TCP/IP Networks. State of the Art and a Proposal of a New System - HICCUPS
Institute of Telecommunications' seminar, Warsaw University of Technology, Poland, November 4th 2003 [.pdf]

3. Krzysztof Szczypiorski
Steganography in Wireless Local Area Networks
PhD thesis (in Polish), Warsaw University of Technology, Poland, September 2006

Steganographic Router (Steg Router, TrustMAS)

1. Krzysztof Szczypiorski, Wojciech Mazurczyk, and et al.
Steganographic Routing in Multi Agent System Environment
Special Issue "Secured Information Systems" of Journal of Information Assurance and Security (JIAS), Dynamic Publishers Inc., Atlanta, GA 30362, USA, Volume 2, Issue 3, September 2007, pp. 235-243, ISSN 1554-1010 [.pdf]
also In: Computing Research Repository (CoRR), abs/0806.0576, arXiv.org E-print Archive, Cornell University, Ithaca, NY (USA), submitted on 3 June 2008, published on 4 June 2008 [.pdf]

2. Krzysztof Szczypiorski, Wojciech Mazurczyk, Krzysztof Cabaj, Paweł Radziszewski, and et al.
Trusted Communication Platform for Multi-Agent Systems (TrustMAS)
Final Report and four Interim Reports. Contract No. N62558-07-P-0042 funded by European Research Office of US Army (also supported by European Office of Aerospace Research and Development of US Air Force), 1 January 2007-31 December 2007

3. Krzysztof Szczypiorski, Wojciech Mazurczyk, Krzysztof Cabaj, Paweł Radziszewski, and et al.
TrustMAS - Trusted Communication Platform for Multi-Agent Systems
In: Robert Meersman and Zahir Tari (Eds.): OTM 2008, Part II - Lecture Notes in Computer Science (LNCS) 5332, Springer-Verlag Berlin Heidelberg, Proc. of OnTheMove Federated Conferences and Workshops: The 3rd International Symposium on Information Security (IS'08), Monterrey, Mexico, November 9-14, 2008, pp. 1019-1035 [+ paper presentation] [.pdf]
also In: Computing Research Repository (CoRR), abs/0808.4060, arXiv.org E-print Archive, Cornell University, Ithaca, NY (USA), submitted on 29 August 2008, published on 1 September 2008 [.pdf]


VoIP steganography (steganophony)


1. Wojciech Mazurczyk and Zbigniew Kotulski
New VoIP Traffic Security Scheme with Digital Watermarking
In: Proceedings of The 25-th International Conference on Computer Safety, Reliability and Security SafeComp 2006, Lecture Notes in Computer Science 4166, pp. 170 - 181, Springer-Verlag, Heidelberg 2006 [.pdf]

2. Wojciech Mazurczyk and Zbigniew Kotulski
New Security and Control Protocol for VoIP Based on Steganography and Digital Watermarking
In: Annales UMCS, Informatica, AI 5, pp. 417-426, ISSN 1732-1360, 2006 [.pdf]

3. Wojciech Mazurczyk and Zbigniew Kotulski
Covert Channel for Improving VoIP Security
In: Jerzy Pejas, Khalid Saeed (Eds.) - Advances in Information Processing and Protection, Science+Business Media Inc. Springer, August 2007

4. Wojciech Mazurczyk and Krzysztof Szczypiorski
Covert Channels in SIP for VoIP signalling
In: Hamid Jahankhani, Kenneth Revett, and Dominic Palmer-Brown (Eds.): ICGeS 2008 - Communications in Computer and Information Science (CCIS) 12, Springer Verlag Berlin Heidelberg, Proc. of 4th International Conference on Global E-security 2008, London, United Kingdom, 23-25 June 2008, pp. 65-72 [+ paper presentation]
also In: Computing Research Repository (CoRR), abs/0805.3538, arXiv.org E-print Archive, Cornell University, Ithaca, NY (USA), submitted on 22 May 2008, published on 26 May 2008 [.pdf]

5. Wojciech Mazurczyk and Krzysztof Szczypiorski
Steganography of VoIP Streams
In: Robert Meersman and Zahir Tari (Eds.): OTM 2008, Part II - Lecture Notes in Computer Science (LNCS) 5332, Springer-Verlag Berlin Heidelberg, Proc. of OnTheMove Federated Conferences and Workshops: The 3rd International Symposium on Information Security (IS'08), Monterrey, Mexico, November 9-14, 2008, pp. 1001-1018 [+ paper presentation] [.pdf]
also (some previous version) In: Computing Research Repository (CoRR), abs/0805.2938, arXiv.org E-print Archive, Cornell University, Ithaca, NY (USA), submitted on 19 May 2008, published on 21 May 2008 [.pdf]
 
6. Wojciech Mazurczyk and Krzysztof Szczypiorski
Steganography Harnesses VoIP Networks
SC Magazine, Haymarket Media, UK, 4 July 2008 [.pdf]
 
7. Wojciech Mazurczyk and Józef Lubacz
Analysis of a Procedure for Inserting Steganographic Data into VoIP Calls
In Proc. of: PGTS'08, the Fifth Polish-German Teletraffic Symposium, Berlinn, Germany, October 6-7, 2008, also In: Computing Research Repository (CoRR), abs/0806.1034, arXiv.org E-print Archive, Cornell University, Ithaca, NY (USA), submitted on 5 June 2008, published on 6 June 2008 [.pdf]
 
8. Wojciech Mazurczyk, Józef Lubacz, and Krzysztof Szczypiorski
Hiding Data in VoIP
In Proc. of: The 26th Army Science Conference, December 1-4, 2008, Orlando, FL, USA [.pdf]
 
9. Wojciech Mazurczyk, Jozef Lubacz
LACK - a VoIP Steganographic Method
In: Computing Research Repository (CoRR), abs/0811.4138, arXiv.org E-print Archive, Cornell University, Ithaca, NY>(USA), submitted on 25 November 2008, published on 26 November 2008 [.pdf]

TCP/IP steganography

1. Wojciech Mazurczyk, Miłosz Smolarczyk, and Krzysztof Szczypiorski
Hiding Information in Retransmissions
In: Computing Research Repository (CoRR), abs/0905.0363, arXiv.org E-print Archive, Cornell University, Ithaca, NY (USA), submitted on 4 May 2009, published on 5 May 2009 [.pdf]

2. Wojciech Mazurczyk and Krzysztof Szczypiorski
Steganography in Handling Oversized IP Packets
In: Computing Research Repository (CoRR), abs/0907.0313, arXiv.org E-print Archive, Cornell University, Ithaca, NY (USA), submitted on 2 June 2009, published on 3 June 2009 [.pdf]

Patents

1. Krzysztof Szczypiorski and Piotr Szafran
Sposób steganograficznego ukrywania i przesyłania danych dla sieci telekomunikacyjnych ze współdzielonym medium transmisyjnym oraz układ formowania ramek warstwy sterowania dostępem do medium (in Polish)
Polish patent application number P-359660, 11 April 2003

2. Wojciech Mazurczyk and Krzysztof Szczypiorski
Sposób steganograficznego ukrywania i przesyłania danych w sieci telekomunikacyjnej (in Polish)
Polish patent application number P-384940, 15 April 2008

External links

1. Gray World Team's Bibliography Page
2. Sebastian Zander's Bibliography Page
3. Steganography (Wikipedia)

Some recent press about our efforts




2007

1. NetWorld.pl (Poland): 9.03.2007 - Zło czai się w tunelu (in Polish)


2008

1. PGPru.com (Russia): 26.05.2008 - Steganografija v paketnoj telefonii (in Russian)
2. NewScientist (UK): 28.05 2008 - Secret messages could be hidden in net phone calls
3. the physics arXiv blog (World): 30.05.2008 - VoIP threatened by steganographic attack
4. TCMnet (UK): 30.05.2008 -
Secret messages could be hidden in net phone calls
5. Interia.pl (Poland): 2.06.2008 - Jak ukryć informację w rozmowie VoIP? (in Polish)
6. KopalniaWiedzy.pl (Poland): 2.06.2008 - Jak ukryć informację w rozmowie VoIP? (in Polish)
7. Locos.pl (Poland): 2.06.2008 - Jak ukryć informację w rozmowie VoIP? (in Polish)
8. derStandard.at (Austria): 2.06.2008 - Geheimbotschaft kommt huckepack mit VoIP-Telefonat (in German)
9. SourceForge - slashdot.org (USA): 2.06.2008 - Hiding Packets in VoIP Chat
10. tweakers.net (Holland): 2.06.2008 - Onderzoekers verstoppen berichten in voip-gesprekken (in Dutch)
11. Metro.se (Sweden): 2.06.2008 - Hemliga meddelanden skickas över IP-telefon (in Swedish)
12. Punto-Informatico.it (Italy): 3.06.2008 - Quei messaggi cifrati nascosti nel VoIP (in Italian)
13. PC-professionell.de (Germany): 3.06.2008 - Geheime Botschaft in VoIP (in German)
14. index.hu (Hungary): 3.06.2008 - Titkos üzenet rejthető a telefonbeszélgetésbe (in Hungarian)
15. Gazeta.pl (Poland): 3.06.2008 - Steganografia w VoIP: polscy uczeni pokazują jak to zrobić (in Polish)
16. Slo-tech.com (Slovakia): 3.06.2008 - Steganografsko skrivanje sporočil v VoIP pakete (in Slovak)
17. The Register (UK): 3.06.2008 - Hidden messages buried in VoIP chatter
18. Solidot.org (China): 3.06.2008 - Information Hiding in VoIP packets (in Chinesse)
19. testticker.de (Germany): 3.06.2008 - Krypto-Botschaft im VoIP-Sprachstrom (in German)
20. Hoga.pl (Poland): 3.06.2008 - Jak ukryć informację w rozmowie VoIP? (in Polish)
21. Switched.com (USA): 3.06.2008 - Spies to Use Skype to Send Secret Messages?
22. AboutVoIP.org (World): 3.06.2008 - VoIP Carrying Secret Messages
23. Dziennik.pl (Poland): 4.06.2008 - Sposób na tajne rozmowy w sieci (in Polish)
24. Skype-watch.com (World): 4.06.2008 - Suspected terrorists using Skype to hide steganographic secret code in Voip phone calls
25. PCnews.ru (Russia): 4.06.2008 - Through VoIP you can send hidden messages (in Russian)
26. SecurityLab.ru (Russia): 4.06.2008 - Polish researchers have identified an opportunity to hide messages in the flow of IP-telephony (in Russian)
27. CNews.KZ (Kazakhstan): 4.06.2008 - Through VoIP you can send hidden messages (in Russian)
28. AllScience.ru (Russia): 4.06.2008 - Steganographic attacks threaten Internet telephony (in Russian)
29. VoIPsandNews.blogspot.com (World): 4.06.2008 - Secret Messages in VoIP Calls?
30. Security.NL (Holland): 4.06.2008 - Onderzoekers verstoppen boodschappen in VoIP-ruis (in Dutch)
31. De Telegraf (Holland): 4.06.2008 - Verborgen boodschappen in VoIP mogelijk (in Dutch)

32. BlogVoip.it (Italy): 4.06.2008 - Steganografia tramite il Voip (in Italian)
33. WebmasterPoint.org (Italy): 4.06.2008 - Telefonate VoIP: nascondere informazioni e messaggi criptati durante le conversazioni (in Italian)
34. Programmazione.it (Italy): 4.06.2008 - Attacchi steganografici sul VoIP (in Italian)
35. PcWelt.de (Germany): 4.06.2008 - Daten in VoIP-Gesprächen verstecken (in German)
36. IDG.se (Sweden): 4.06.2008 - Forskare visar snabb steganografi i VoIP (in Swedish)
37. ING.dk (Danmark): 4.06.2008 - Spioner kan udnytte IP-telefoni (in Danish)
38. Fast News Info (World): 4.06.2008 - Hidden messages buried in VoIP chatter
39. VoIP Resources (World): 4.06.2008 - VoIP Carries Secret Messages
40. IT in Canada (Canada): 5.06.2008 - VoIP Enables New Level Of Steganography
41. SecurityWorld.cz (Czech Republic): 5.06.2008 - Moderní steganografie: Zprávu lze ukrýt i do dat VoIP (in Czech)
42. Windows IT Pro (USA): 5.06.2008 - Steganography Moves Into VoIP
43. HS Daily Wire (USA): 5.06.2008 - Worry: VoIP especially suitable for conveying hidden messages
44. ACM.org (USA): 9.06.2008 - Secret Messages Could Be Hidden in Net Phone Calls New Scientist
45. Computerworld.ch (Switzerland): 9.06.2008 - Forscher verstecken Daten in VoIP-Gesprächen (in German)
46. SC Magazine (UK): 4.07.2008: - Steganography developers turn their attention to hiding information in VoIP
47. PCnews.ru (Russia): 1.09.2008 - TrustMAS - virtual'nyy stegonet, deystvuyushchiy poverkh raznykh kanalov svyazi (in Russian)
48. the physics arXiv blog (World): 28.11.2008 - Steganophony - when internet telephony meets steganography
49. The Financial Express (World): 28.12.2008: Steganophony

2009

1. ComputerWorld (Poland): March 2009, No. 10/2009 - EN FACE: dr inż. Krzysztof Szczypiorski... (in Polish) - PDF version
2. NewScientist (UK): 26.05.2009 - Fake web traffic can hide secret chat
3. Hirszerzo.hu (Hungary): 27.05.2009 - Üzeneteket rejthet a világháló forgalma (in Hungarian)
4. Slashdot (World): 27.05.2009 - Phony TCP Retransmissions Can Hide Secret Messages
5. USAToday (USA): 27.05.2009 - Fake web traffic can hide secret chat
6. Technet.hu (Hungary): 27.05.2009 - Titkos üzneteket küldhetünk a netbe kódolva (in Hungarian)
7. Digitoday.fi (Finland): 27.05.2009 - TCP-liikenteeseen voi piilottaa salaviestejä (in Finnish)
8. Utro.ru (Russia): 27.05.2009 - Paranoikam i revolyutsioneram pomozhet TCP (in Russian)
9. NDSL.kr (Korea): 27.05.2009 - Fake web traffic to hide the secret conversation (in Korean)
10. ACM.org (USA): 27.05.2009 - Fake web traffic can hide secret chat
11. Bruce Schneier's Blog (USA): 28.05.2009 - Steganography Using TCP Retransmission
12. HVG.hu (Hungary): 28.05.2009 - Novemberben megkerülik a kínai internetes cenzúrát (in Hungarian)
13. MWilliams.info (USA): 28.05.2009 - Retransmission Steganography
14. ZDNet.be (Belgium): 28.05.2009 - Beveiligers spelen verstoppertje in webverkeer (in Dutch)
15. The Register (UK): 28.05.2009 - Hiding secret messages in internet traffic: a new how-to

16. Dshield (World): 28.05.2009 - Stego in TCP retransmissions
17. SecurityWorld.cz (Czech Republic): 29.05.2009 - Steganografie v protokolu TCP (in Czech)
18. Heise.de (Germany): 29.05.2009 - Steganografie mit TCP-Retransmissions (in German)
19. Heise-online.pl (Polska): 29.05.2009 - Steganografia z retransmisjami TCP (in Polish)

20. habrahabr.ru (Russia): 29.05.2009 - TCP steganografiya ili kak skryt' peredachu dannykh v internete (in Russian)
21. Security.NL (Holland): 29.06.2009 - Onderzoekers verstoppen berichten in internetverkeer (in Dutch)

22. H-online (UK): 28.05.2009 - Steganography with TCP retransmissions
23. ITsec.ru (Russia): 29.05.2009 - Maskirovka taynykh soobshcheniy v internet-trafike: novyy sposob (in Russian)
24. digittoday.fi (Finland): 29.05.2009 - TCP-liikenteeseen voi piilottaa salaviestejä (in Finnish)

25. MobileDevice.ru (Russia): 29.05.2009 - Kak posekretnichat' po otkrytomu kanalu (in Russian)
26. Tekniikka & Talous (Finland): 29.05.2009 - Uusi salaustekniikka: Valheellinen virheilmoitus ja datan lähettäminen uudestaan (in Finnish)
27. Technologijos.lt (Lithuania): 29.05.2009 - Lenku mokslininkai kuria internetine steganografija su tikslu padeti zodzio laisves neturincios salims (in Lithuanian)
28. Programmazione.it (Italy): 30.05.2009 - Nascondere messaggi nelle ritrasmissioni (in Italian)
29. IPSec.pl (Poland): 31.05.2009 - Steganografia w retransmisjach (in Polish)
30. Cebit.de (Germany): 31.05.2009 - Steganografie mit TCP-Retransmissions (in German)
31. Seguridaddescifrada.blogspot.com (Mexico): 29.05.2009 - Esteganografía usando TCP (in Spanish)
32. Sec.ru (Russia): 02.06.2009 - Tekhnologiya RSTEG peredast skrytyye soobshcheniya v paketakh protokola TCP (in Russian)

33. ComputerWorld (Poland): June 2009, No. 23/2009 - Najciemniej pod latarnią (in Polish) - PDF version
34. Newstin.fr (France): 05.06.2009 - RSTEG un hybride stéganographique réseau utilisant les mécanismes de retransmission TCP (in French)
35. Irevolution.wordpress.com (USA): 05.06.2009 - Steganography 2.0: Digital Resistance against Repressive Regimes
36. Net.effect (USA): 05.06.2009 - Polish scientists hope stenography could help beat authoritarian Web censorship
37. Cryptogram by Bruce Schneier (USA): 15.06.2009 - News: Steganography Using TCP Retransmission
38. Kaspersky - Lab.mag (Germany): 06.2009 - MEGABITS HUCKEPACK MIT SKYPE

Network Security Group - last modified: 16/6/2009