{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,8,23]],"date-time":"2025-08-23T00:10:04Z","timestamp":1755907804354,"version":"3.44.0"},"publisher-location":"New York, NY, USA","reference-count":24,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,6,24]],"date-time":"2024-06-24T00:00:00Z","timestamp":1719187200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"\u00f0Innovative University\u00f0, a joint initiative by the Federal Government and the German L\u00e4nder"},{"name":"Agentur f\u00fcr Innovation in der Cybersicherheit, Germany"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,6,24]]},"DOI":"10.1145\/3658664.3659651","type":"proceedings-article","created":{"date-parts":[[2024,6,12]],"date-time":"2024-06-12T15:09:27Z","timestamp":1718204967000},"page":"95-100","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":2,"title":["A Development Framework for TCP\/IP Network Steganography Malware Detection"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-3360-1251","authenticated-orcid":false,"given":"Sebastian","family":"Zillien","sequence":"first","affiliation":[{"name":"Center for Technology and Transfer (ZTT), Worms University of Applied Sciences, Worms, Germany"}]},{"ORCID":"https:\/\/orcid.org\/0009-0000-7131-6844","authenticated-orcid":false,"given":"Denis","family":"Petrov","sequence":"additional","affiliation":[{"name":"Center for Technology and Transfer (ZTT), Worms University of Applied Sciences, Worms, Germany"}]},{"ORCID":"https:\/\/orcid.org\/0009-0001-3540-983X","authenticated-orcid":false,"given":"Pascal","family":"Ruffing","sequence":"additional","affiliation":[{"name":"Center for Technology and Transfer (ZTT), Worms University of Applied Sciences, Worms, Germany"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-4772-0459","authenticated-orcid":false,"given":"Friedrich","family":"Gross","sequence":"additional","affiliation":[{"name":"Center for Technology and Transfer (ZTT), Worms University of Applied Sciences, Worms, Germany"}]}],"member":"320","published-online":{"date-parts":[[2024,6,24]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Hans Peter Anvin. 2024. PXELINUX. https:\/\/wiki.syslinux.org\/wiki\/index.php?title=PXELINUX last accessed: 2024-01-09."},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1109\/NetSoft48620.2020.9165537"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSEC.2022.3178205"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1109\/CNS48642.2020.9162247"},{"key":"e_1_3_2_1_5_1","unstructured":"Noel Chiappa. 2024. TFTP. https:\/\/datatracker.ietf.org\/doc\/html\/rfc1350 last accessed: 2024-01-08."},{"key":"e_1_3_2_1_6_1","unstructured":"Clonezilla. 2024. Clonezilla. https:\/\/clonezilla.org\/ last accessed: 2024-01-09."},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1155\/2022\/2254959"},{"key":"e_1_3_2_1_8_1","unstructured":"Internet Systems Consortium Inc. 2024. Kea DHCP. https:\/\/github.com\/isc-projects\/kea last accessed: 2024-01-05."},{"key":"e_1_3_2_1_9_1","unstructured":"Peter Kacherginsky. 2024. DNSChef. https:\/\/github.com\/iphelix\/dnschef last accessed: 2024-01-05."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1108\/ijieom-01--2023-0011"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.3217\/jucs-024-05-0556"},{"key":"e_1_3_2_1_12_1","unstructured":"MITRE Co. 2021. Virtualization\/Sandbox Evasion. https:\/\/attack.mitre.org\/versions\/v14\/techniques\/T1497\/ last accessed: 2024-01--16."},{"key":"e_1_3_2_1_13_1","unstructured":"PiKVM. 2024. PiKVM. https:\/\/pikvm.org\/ last accessed: 2024-01--16."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","unstructured":"The pandas development team. 2020. pandas-dev\/pandas: Pandas. https:\/\/doi.org\/10.5281\/zenodo.3509134","DOI":"10.5281\/zenodo.3509134"},{"key":"e_1_3_2_1_15_1","unstructured":"The Python Software Foundation. 2024. Python HTTP library. https:\/\/docs.python.org\/3\/library\/http.server.html last accessed: 2024-01-05."},{"key":"e_1_3_2_1_16_1","unstructured":"The Tcpdump Group. 2024. pcap-filter. https:\/\/www.tcpdump.org\/manpages\/pcap-filter.7.html last accessed: 2024-02--28."},{"key":"e_1_3_2_1_17_1","unstructured":"The Wireshark team. 2024 a. dumpcap. https:\/\/www.wireshark.org\/docs\/man-pages\/dumpcap.html last accessed: 2024-01--16."},{"key":"e_1_3_2_1_18_1","unstructured":"The Wireshark team. 2024 b. Wireshark. https:\/\/gitlab.com\/wireshark\/wireshark\/-\/tree\/master last accessed: 2024-01--16."},{"key":"e_1_3_2_1_19_1","unstructured":"Steffen Wendzel. 2019. Network information hiding: terminology taxonomy methodology and countermeasures. http:\/\/www.wendzel.de\/dr.org\/files\/Papers\/thesis_with_cover.pdf Habilitation thesis FernUniversit\u00e4t in Hagen."},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.36227\/techrxiv.20215373"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/2684195"},{"key":"e_1_3_2_1_22_1","unstructured":"Sebastian Zander and Grenville Armitage. 2008. CCHEF -- Covert channels evaluation framework design and implementation."},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/TE.2016.2520400"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/3465481.3470067"}],"event":{"name":"IH&MMSEC '24: ACM Workshop on Information Hiding and Multimedia Security","sponsor":["SIGMM ACM Special Interest Group on Multimedia"],"location":"Baiona Spain","acronym":"IH&MMSEC '24"},"container-title":["Proceedings of the 2024 ACM Workshop on Information Hiding and Multimedia Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3658664.3659651","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3658664.3659651","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T23:43:45Z","timestamp":1755906225000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3658664.3659651"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,6,24]]},"references-count":24,"alternative-id":["10.1145\/3658664.3659651","10.1145\/3658664"],"URL":"https:\/\/doi.org\/10.1145\/3658664.3659651","relation":{},"subject":[],"published":{"date-parts":[[2024,6,24]]},"assertion":[{"value":"2024-06-24","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}