Eric.freyssinet at 12:30, 3 August 2015

2015-08-03T12:30:49Z

← Older revision		Revision as of 12:30, 3 August 2015
Line 1:		Line 1:
	{{Publication}}		{{Publication
			\|Year=2012
			\|Date=2012-03-20
			\|Editor=SANS Institute
			\|Link=http://www.sans.org/reading-room/whitepapers/threats/covert-channels-social-networks-33960
			\|Author=Jose Selvi,
			\|Type=White paper
			\|Abstract=There are many ways to embed data into unused fields of some network protocols
			like IP, TCP, etc in order to send and receive data in a hidden way. Nowadays,
			malware coders are hiding their communications using https, but techniques such
			as DNS sinkhole can help network administrators to stop some of them. The
			following step in Covert Channels is to embed data into known applications such as,
			for instance, social networks. Since it uses known domain names, it is difficult to
			detect the difference between real communications and evil ones. In this paper, we
			review some ways to embed data into these social networks, and how this can affect
			to corporate and personal security. As a proof of concept, we have released a tool
			called "facecat" FaceBook Cat). With this tool we can relay ports using a FaceBook
			Wall as a Pipe, so it can be used through proxies and other network protections.
			}}

Eric.freyssinet: Created page with "{{Publication}}"

2015-08-03T12:29:02Z

Created page with "{{Publication}}"

New page