DETECTION AND PREVENTION OF OBFUSCATED DATA LEAK CHANNELS IN CORPORATE NETWORKS

Mansurov Alexandr Valerievich, Lependin Andrey Aleksandrovich, Ruder David Davidovich, Ladygin Pavel Sergeevich

This paper discusses the important problem of detection and prevention of hidden obfuscated data leak channels inside the protected areas of corporate networks. Typically, these channels are initiated by the malicious software components executed at the users’ workstations. Simulation, consecutive study of their operating principles, and methods of masquerading the confidential data transfer as the regular HTTP and DNS network traffic are conducted in details. Following the results of the study, several effective approaches are proposed to identify and eliminate the operation of such hidden data leak channels inside the protected areas of corporate networks.

Keywords:network security, traffic obfuscation, data leak channels, traffic filtering.