<?xml version="1.0" encoding="utf-8"?>
<export-example>
  <doc>
    <id>2396</id>
    <completedYear>2024</completedYear>
    <publishedYear>2024</publishedYear>
    <thesisYearAccepted/>
    <language>eng</language>
    <pageFirst>1</pageFirst>
    <pageLast>10</pageLast>
    <pageNumber>10</pageNumber>
    <edition/>
    <issue/>
    <volume/>
    <type>conferenceobject</type>
    <publisherName>ACM</publisherName>
    <publisherPlace>New York, NY, USA</publisherPlace>
    <creatingCorporation/>
    <contributingCorporation/>
    <belongsToBibliography>1</belongsToBibliography>
    <completedDate>--</completedDate>
    <publishedDate>2024-07-30</publishedDate>
    <thesisDateAccepted>--</thesisDateAccepted>
    <title language="eng">A Comprehensive Pattern-based Overview of Stegomalware</title>
    <abstract language="eng">In recent years, malware increasingly applies steganography methods to remain undetected as long as possible. Such malware is called stegomalware. Stegomalware not only covers its tracks on the infected system, but also hides its communication with adversary infrastructure. This paper reviews 106 stegomalware cases on the basis of 133 reports, including digital media (audio, video, images), text, and network steganography. For this purpose, the steganography methods used by the malware are categorized and introduced using a pattern-based approach. Our survey reveals that&#13;
solely a small set of patterns are employed by known malware samples. We also analyzed the commonalities of media-, text-, and network-based stegomalware. We show that only a small variation of network protocols, media types and hiding methods are utilized by stegomalware. For this reason, research may focus on these to&#13;
counter malicious activities covered by steganography.</abstract>
    <parentTitle language="eng">Proceedings of the 19th International Conference on Availability, Reliability and Security</parentTitle>
    <identifier type="doi">10.1145/3664476.3670886</identifier>
    <enrichment key="opus_doi_flag">true</enrichment>
    <enrichment key="opus_import_data">x</enrichment>
    <enrichment key="local_crossrefDocumentType">proceedings-article</enrichment>
    <enrichment key="local_import_origin">crossref</enrichment>
    <enrichment key="local_doiImportPopulated">PersonAuthorFirstName_1,PersonAuthorLastName_1,PersonAuthorIdentifierOrcid_1,PersonAuthorFirstName_2,PersonAuthorLastName_2,PersonAuthorIdentifierOrcid_2,PersonAuthorFirstName_3,PersonAuthorLastName_3,PersonAuthorIdentifierOrcid_3,PersonAuthorFirstName_4,PersonAuthorLastName_4,PersonAuthorIdentifierOrcid_4,Enrichmentconference_title,Enrichmentconference_place,PublisherName,PublisherPlace,TitleMain_1,TitleParent_1,PageNumber,PageFirst,PageLast,CompletedYear</enrichment>
    <enrichment key="conference_title">ARES 2024: The 19th International Conference on Availability, Reliability and Security</enrichment>
    <enrichment key="conference_place">Vienna Austria</enrichment>
    <enrichment key="Reviewstatus">Begutachtet/Reviewed</enrichment>
    <enrichment key="opus.source">doi-import</enrichment>
    <licence>Creative Commons - CC BY - Namensnennung 4.0 International</licence>
    <author>Fabian Strachanski</author>
    <author>Denis Petrov</author>
    <author>Tobias Schmidbauer</author>
    <author>Steffen Wendzel</author>
    <subject>
      <language>eng</language>
      <type>uncontrolled</type>
      <value>information hiding, steganography, steganalysis, detection tech niques, malware, threat intelligence</value>
    </subject>
    <collection role="institutes" number="">Fakultät Informatik</collection>
    <collection role="Forschungsschwerpunkt" number="5">Digitalisierung &amp; Künstliche Intelligenz</collection>
  </doc>
</export-example>
