A method for detecting network steganography based on the statistical distribution of network packet fields

Krasov Andrey Vladimirovich

Classification of steganographic methods of information transformation is described in the basic model of threats to the security of personal data during their processing in personal data information systems, approved by the FSTEC of the Russian Federation in 2008. An analysis of existing programs for creating steganographic channels shows that most of the methods presented in it have not been in demand in practice, at the same time, new methods have appeared that are not included in this model. The article presents the results of work on the Grant-I B5/2020 project, proposals for improving the basic model.

Keywords:network packet, steganography, FSTEC, stegulation, steganalysis.