Model for steganographic data embedding into program memory

Cover Page

Cite item

Full Text

Open Access Open Access
Restricted Access Access granted
Restricted Access Subscription or Fee Access

Abstract

The article suggests a method for embedding hidden data into the program dynamic memory. The method is based on connecting a dynamic authentication library. The library works directly with a heap of programs. The algorithm breaks the security label into blocks of the same size. The blocks are evenly distributed across the heap. The memory scheduler is not involved in the generation of this data. The method deletes embedded data after a certain time period. Heap address calculation parameters and time period are parameters of the algorithm. The authentication library that embeds the information is universal. The probabilistic model of the program with a heap is proposed in the article. This model is necessary to investigate the possibility of collisions between embedded data and dynamic program variables. The model treats the creation and deletion of dynamic variables as random events. Computer simulation of program behavior for different probability ratios was carried out. А computer experiment showed the basic patterns of heap use by the program. The simulation results demonstrate the linear dependence of heap filling on the probability ratio of creating and deleting variables. The criteria for selecting steganographic embedding parameters are determined based on modeling. The period for placement of embedded data blocks and the time of presence the steganographic insert in the program memory are determined by the statistical characteristics of the executable code.

About the authors

S. V. Belim

Omsk State Technical University

Author for correspondence.
Email: sbelim@mail.ru

Dr. Phys.-Math. Sc., Professor

Russian Federation, Omsk

S. N. Munko

Omsk State Technical University

Email: munko_s@mail.ru

Assistant

Russian Federation, Omsk

S. Yu. Belim

Omsk State Technical University

Email: svbelim@gmail.com

PhD, Assistant Professor

Russian Federation, Omsk

References

  1. El-Khalil R., Keromytis А. Hydan: Hiding information in program binaries. Lecture Notes in Computer Science, 2004, vol. 3269, pp. 187—199, doi: 10.1007/978-3-540-30191-2_15
  2. Krasov A., Arshinov A., Ushakov I. Embedding the hidden information into java byte code. ARPN Journal of Engineering and Applied Sciences, 2018, vol. 13 (8), pp. 2746—2752.
  3. Krasov A., Tregubov Y., Shterenberg S. Research of copy protection methods software based on embed of digital watermarks into executable and library files. Cambridge Journal of Education and Science, 2015, vol. 2 (14), pp. 565—573.
  4. Shterenberg S. I., Krasov A. V., Ushakov I. A. Analysis of using equivalent instructions at the hidden embedding of information into the executable files. Journal of Theoretical and Applied Information Technology, 2015, vol. 80 (1), pp. 28—34.
  5. Hirohisa Н. Data hiding for text and binary files. Computational linguistics: concepts, methodologies, tools, and applications, 2014, pp. 1495—1514, doi: 10.4018/978-1-4666-6042-7.ch074.
  6. Choi S., Park H., Lim H.-I, Han T. А static birthmark of binary executables based on API call structure. ASIAN’07: Proceedings of the 12th Asian computing science conference on Advances in computer science: computer and network security. 2007, pp. 2—16, doi: 10.1007/978-3-540-76929-3_2.
  7. Anckaert B., De Sutter B., Chanet D., De Bosschere K. Steganography for executables and code transformation signatures. Lecture Notes in Computer Science, 2005, vol. 3506, pp. 425—439, doi: 10.1007/11496618_31.
  8. Stern J. P., Hachez G., Koeune F., Quisquater J. J. Robust object watermarking: application to code. Lecture Notes in Computer Science, 2000, vol. 1768, pp. 368—378, doi: 10.1007/10719724_25.
  9. Mairesse J., Vuillon L. Asymptotic behavior in a heap model with two pieces. Theoretical Computer Science, 2002, vol. 270, pp. 525—560, doi: 10.1016/S0304-3975(01)00004-4.
  10. Mandrykin M. U., Mutilin V. S. Modeling Memory with Uninterpreted Functions for Predicate Abstractions. Proceedings of the Institute for System Programming of the RAS (Proceedings of ISP RAS), 2015, vol. 27 (5), pp. 117—142 (in Russian), doi: 10.15514/ISPRAS-2015-27(5)-7.
  11. Berger E. D., Zorn В. G. DieHard: Probabilistic memory safety for unsafe languages. ACM sigplan notices, 2006, vol. 41 (6), pp. 158—168, doi: 10.1145/1133255.1134000
  12. Fraguela B. B., Doallo R., Zapata E. L. Probabilistic Miss Equations: Evaluating Memory Hierarchy Performance. IEEE Transaction on computers, 2003, vol. 52 (3), pp. 321—336, doi: 10.1109/TC.2003.1183947.
  13. Stefanakos I., Calinescu R., Gerasimou S. Probabilistic Program Performance Analysis. 47th Euromicro Conference on Software Engineering and Advanced Applications (SEAA), 2021, pp. 148—157, doi: 10.1109/SEAA53835.2021.00027.

Supplementary files

Supplementary Files
Action
1. JATS XML

Copyright (c) 2025 Informacionnye Tehnologii



СМИ зарегистрировано Федеральной службой по надзору в сфере связи, информационных технологий и массовых коммуникаций (Роскомнадзор).
Регистрационный номер и дата принятия решения о регистрации СМИ: серия ПИ № 77 - 15565 от 02 июня 2003 г.