FUNCTIONAL MODEL OF THE PROCESS OF INFORMATION SECURITY THREATS IMPLEMENTATION USING COVERT STEGANOGRAPHIC CHANNELS BY AN EXTERNAL INTRUDER
Oleg S. Avsentiev, V V Butov, Kirill A. Tsyganov
Abstract
The functional description of processes of information security threats implementation by hidden steganographic channels as a way of their realization by an external intruder in the absence of measures to counteract such threats is given. The article considers the mechanisms of information hiding and transmitting by using steganography, which allow to bypass conventional information protection measures. The analysis of methods of information security threats implementation by steganographic channels for malware deployment, management and stealing sensitive information is carried out. A descriptive model and functional model of process of implementing threats in the absence of protection measures have been developed. These models can be used to develop analytical models for estimating the time required for the realization of the investigated information security threats, characterizing the dynamics of their implementation in the absence and applying protection measures. An indicator for assessing information security is proposed. It is shown that, while developing analytical models for calculating this indicator, necessary to consider the interrelation of parallel processes of information processing in information systems, threats to its security by hidden steganography channels and counteraction to the implementation of these threats using steganalysis. To develop these models, it is reasonable to use the apparatus of composite Petri-Markov networks.