We present here the first work to propose different mechanisms for hiding data in the Extensible Messaging and Presence Protocol (XMPP). This is a very popular instant messaging protocol used by many messaging platforms such as Google Talk, Cisco, LiveJournal and many others. Our paper describes how to send a secret message from one XMPP client to another, without raising the suspicion of any intermediaries. The methods described primarily focus on using the underlying protocol as a means for steganography, unlike other related works that try to hide data in the content of instant messages. In doing so, we provide a more robust means of data hiding and additionally offer some preliminary analysis of its general security, in particular against entropic-based steganalysis.
翻译:我们在此介绍在《扩展通信和存在议定书》(XMPP)中提出不同数据隐藏机制的首份工作,这是谷歌Talk、Cisco、LiveJournal等许多信息平台使用的非常受欢迎的即时信息协议,我们的文件描述了如何从一个 XMPP客户端向另一个客户端发送秘密信息,而不会引起任何中间人的怀疑。所述方法主要侧重于使用基本协议作为摄制法的手段,不同于试图将数据隐藏在即时信息内容中的其他相关工作。我们为此提供了一种更强有力的数据隐藏手段,并额外提供了对其总体安全性的一些初步分析,特别是针对基于昆虫的斯特格分析。