{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,14]],"date-time":"2026-04-14T16:14:52Z","timestamp":1776183292237,"version":"3.50.1"},"reference-count":48,"publisher":"MDPI AG","issue":"4","license":[{"start":{"date-parts":[[2020,12,18]],"date-time":"2020-12-18T00:00:00Z","timestamp":1608249600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Computers"],"abstract":"<jats:p>As the popularity of social network service (SNS) messengers (such as Telegram, WeChat or KakaoTalk) grows rapidly, cyberattackers and cybercriminals start targeting them, and from various media, we can see numerous cyber incidents that have occurred in the SNS messenger platforms. Especially, according to existing studies, a novel type of botnet, which is the so-called steganography-based botnet (stego-botnet), can be constructed and implemented in SNS chat messengers. In the stego-botnet, by using various steganography techniques, every botnet communication and control (C&amp;C) messages are secretly embedded into multimedia files (such as image or video files) frequently shared in the SNS messenger. As a result, the stego-botnet can hide its malicious messages between a bot master and bots much better than existing botnets by avoiding traditional botnet-detection methods without steganography-detection functions. Meanwhile, existing studies have focused on devising and improving steganography-detection algorithms but no studies conducted automated steganography image-detection system although there are a large amount of SNS chatrooms on the Internet and thus may exist many potential steganography images on those chatrooms which need to be inspected for security. Consequently, in this paper, we propose an automated system that detects steganography image files by collecting and inspecting all image files shared in an SNS chatroom based on open image steganography tools. In addition, we implement our proposed system based on two open steganography tools (Stegano and Cryptosteganography) in the KakaoTalk SNS messenger and show our experimental results that validate our proposed automated detection system work successfully according to our design purposes.<\/jats:p>","DOI":"10.3390\/computers9040103","type":"journal-article","created":{"date-parts":[[2020,12,18]],"date-time":"2020-12-18T11:42:09Z","timestamp":1608291729000},"page":"103","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":7,"title":["Design and Implementation of Automated Steganography Image-Detection System for the KakaoTalk Instant Messenger"],"prefix":"10.3390","volume":"9","author":[{"given":"Jun","family":"Park","sequence":"first","affiliation":[{"name":"Department of Defense Science (Computer Engineering), Graduate School of Defense Management, Korean National Defense University, Nonsan 33021, Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1274-6291","authenticated-orcid":false,"given":"Youngho","family":"Cho","sequence":"additional","affiliation":[{"name":"Department of Defense Science (Computer Engineering), Graduate School of Defense Management, Korean National Defense University, Nonsan 33021, Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2020,12,18]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","unstructured":"Zhou, Y., and Jiang, X. (2012, January 24\u201325). Dissecting Android Malware: Characterization and Evolution. Proceedings of the 2012 IEEE Symposium on Security and Privacy, San Francisco, CA, USA.","DOI":"10.1109\/SP.2012.16"},{"key":"ref_2","first-page":"10","article-title":"Mobile phishing attacks and defence mechanisms: State of art and open research challenges","volume":"73","author":"Geol","year":"2017","journal-title":"Comput. Secur."},{"key":"ref_3","first-page":"446","article-title":"A Survey on Security for Mobile Devices","volume":"15","author":"Martinelli","year":"2012","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_4","doi-asserted-by":"crossref","unstructured":"Yin, T., Zhang, Y., and Li, S. (2014, January 6\u20138). Dr-SNbot: A social network-based botnet with strong destroy-resistance. Proceedings of the 9th IEEE International Conference on Networking, Architecture, and Storage (NAS), Tianjin, China.","DOI":"10.1109\/NAS.2014.37"},{"key":"ref_5","doi-asserted-by":"crossref","first-page":"1068","DOI":"10.1109\/TDSC.2016.2641441","article-title":"The rise of social botnets: Attacks and countermeasures","volume":"15","author":"Zhang","year":"2016","journal-title":"IEEE Trans. Dependable Secur. Comput."},{"key":"ref_6","doi-asserted-by":"crossref","unstructured":"Yang, C., Harkreader, R., and Gu, G. (2011, January 20\u201321). Die free or live hard? Empirical evaluation and new design for fighting evolving twitter spammers. Proceedings of the International Workshop on Recent Advances in Intrusion Detection, Menlo Park, CA, USA.","DOI":"10.1007\/978-3-642-23644-0_17"},{"key":"ref_7","doi-asserted-by":"crossref","unstructured":"Wu, D., Fang, B., Yin, J., Zhang, F., and Cui, X. (2018, January 18\u201321). Slbot: A serverless botnet based on service flux. Proceedings of the 2018 IEEE Third International Conference on Data Science in Cyberspace (DSC), Guangzhou, China.","DOI":"10.1109\/DSC.2018.00034"},{"key":"ref_8","unstructured":"(2020, September 27). WeChat. Available online: https:\/\/www.wechat.com."},{"key":"ref_9","unstructured":"(2020, September 21). KakaoTalk. Available online: https:\/\/www.kakaocorp.com\/service\/KakaoTalk?lang=en."},{"key":"ref_10","unstructured":"Mokel, T., Eloff, J., and Olivier, M. (July, January 29). An Overview of Image Steganography. Proceedings of the ISSA 2005 New Knowledge Today Conference, Sandton, South Africa."},{"key":"ref_11","first-page":"1213","article-title":"Comparison of Various Images Steganography Techniques","volume":"2","author":"Kanzariya","year":"2013","journal-title":"Int. J. Comput. Sci. Manag. Res."},{"key":"ref_12","first-page":"707","article-title":"Image Steganography: A Review","volume":"3","author":"Sharda","year":"2013","journal-title":"Int. J. Emerg. Technol. Adv. Eng."},{"key":"ref_13","first-page":"142","article-title":"A Review on the Various Recent Steganography Techniques","volume":"2","author":"Singh","year":"2013","journal-title":"Int. J. Comput. Sci. Netw."},{"key":"ref_14","first-page":"1","article-title":"Sociobot: A twitter-based botnet","volume":"12","author":"Makkar","year":"2017","journal-title":"Int. J. Comput. Sci. Netw."},{"key":"ref_15","unstructured":"Faghani, M., and Nguyen, U. (May, January 29). Socellbot: A new botnet design to infect smartphones via online social networking. Proceedings of the IEEE Canadian Conference on Electrical and Computer Engineering (CCECE), Montreal, QC, Canada."},{"key":"ref_16","unstructured":"(2020, September 27). Steghide. Available online: http:\/\/steghide.sourceforge.net."},{"key":"ref_17","unstructured":"(2020, September 27). Openstego. Available online: https:\/\/www.openstego.com."},{"key":"ref_18","doi-asserted-by":"crossref","unstructured":"Gaonkar, S., Dessai, N., Costa, J., Borkar, A., Aswale, S., and Shetgaonkar, P. (2020, January 24\u201325). A Survey on Botnet Detection Techniques. Proceedings of the 2020 International Conference on Emerging Trends in Information Technology and Engineering (ic-ETITE), Vellore, India.","DOI":"10.1109\/ic-ETITE47903.2020.Id-70"},{"key":"ref_19","first-page":"57","article-title":"A Survey of Botnet and Botnet Detection Methods","volume":"7","author":"Sonawane","year":"2018","journal-title":"Int. J. Eng. Res. Technol."},{"key":"ref_20","doi-asserted-by":"crossref","unstructured":"(2020, October 24). FORTINET Threat Landscape Report Q4 2018. Available online: https:\/\/www.fortinet.com\/content\/dam\/fortinet\/assets\/threat-reports\/threat-report-q4-2018.pdf.","DOI":"10.1016\/S1361-3723(18)30050-2"},{"key":"ref_21","unstructured":"(2020, September 21). Stegano\u00b7PyPI. Available online: https:\/\/pypi.org\/project\/stegano."},{"key":"ref_22","unstructured":"(2020, November 30). Cryptosteganography\u00b7PyPI. Available online: https:\/\/pypi.org\/project\/cryptosteganography."},{"key":"ref_23","doi-asserted-by":"crossref","first-page":"898","DOI":"10.1109\/SURV.2013.091213.00134","article-title":"A Taxonomy of Botnet Behavior, Detection, and Defense","volume":"16","author":"Khattak","year":"2014","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_24","doi-asserted-by":"crossref","first-page":"2768","DOI":"10.1109\/COMST.2017.2749442","article-title":"Botnet communication patterns","volume":"19","author":"Vormayr","year":"2017","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_25","first-page":"264","article-title":"A Survey on Botnet Architectures, Detection and Defences","volume":"17","author":"Imam","year":"2014","journal-title":"Int. J. Netw. Secur."},{"key":"ref_26","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1016\/j.jnca.2016.10.007","article-title":"Survey of approaches and features for the identification of HTTP-based botnet traffic","volume":"76","author":"Acarali","year":"2016","journal-title":"J. Netw. Comput. Appl."},{"key":"ref_27","doi-asserted-by":"crossref","unstructured":"Eslahi, M., Rohmad, S., Nilsaz, H., Naseri, M., Tahir, N., and Hashim, H. (2015, January 12\u201314). Periodicity Classification of HTTP Traffic to Detect HTTP Botnets. Proceedings of the IEEE Symposium on Computer Applications & Industrial Electronics (ISCAIE), Langkawi, Malaysia.","DOI":"10.1109\/ISCAIE.2015.7298339"},{"key":"ref_28","doi-asserted-by":"crossref","unstructured":"Zeidanloo, H., Manaf, A., Vahdani, P., Tabatabaei, F., and Zamani, M. (2010, January 11\u201312). Botnet detection based on traffic monitoring. Proceedings of the IEEE International Conference on Networking and Information Technology, Manila, Philippines.","DOI":"10.1109\/ICNIT.2010.5508552"},{"key":"ref_29","doi-asserted-by":"crossref","unstructured":"Yang, Z., and Wang, B. (2019). A Feature Extraction Method for P2P Botnet Detection Using Graphic Symmetry Concept. Symmetry, 11.","DOI":"10.3390\/sym11030326"},{"key":"ref_30","doi-asserted-by":"crossref","unstructured":"Saad, S., Traore, I., Ghorbani, A., Sayed, B., Zhao, D., Lu, W., Felix, J., and Hakimian, P. (2011, January 19\u201321). Detecting P2P Botnets through Network Behavior Analysis and Machine Learning. Proceedings of the IEEE Ninth Annual International Conference on Privacy, Security and Trust, Montreal, QC, Canada.","DOI":"10.1109\/PST.2011.5971980"},{"key":"ref_31","doi-asserted-by":"crossref","first-page":"96","DOI":"10.1145\/2818717","article-title":"The rise of social bots","volume":"59","author":"Ferrara","year":"2014","journal-title":"Commun. ACM"},{"key":"ref_32","doi-asserted-by":"crossref","unstructured":"Nagaraja, S., Houmansdr, A., Piyawongwisai, P., Singh, V., Agarwal, P., and Borisov, N. (2011, January 18\u201320). Stegobot: A covert social network botnet. Proceedings of the Information Hiding Conference, Prague, Czech Republic.","DOI":"10.1007\/978-3-642-24178-9_21"},{"key":"ref_33","unstructured":"Yuk, S., and Cho, Y. (2020, January 22\u201323). A Study on Steganography-based Botnet C & C Covert Communication Model using Thumbnail Images in SNS Instant Messengers. Proceedings of the KSII Spring\/Fall Conference, Jeju, Korea."},{"key":"ref_34","unstructured":"Kwak, M., and Cho, Y. (2020, January 5\u20137). Video Steganography-based Botnet Communication in Telegram Messenger. Proceedings of the 15th Asia Pacific International Conference on Information Science and Technology (APIC-IST 2020), Seoul, Korea."},{"key":"ref_35","doi-asserted-by":"crossref","first-page":"511","DOI":"10.1007\/978-3-642-13708-2_30","article-title":"Social Network-Based Botnet Command-and-Control: Emerging Threats and Countermeasures","volume":"Volume 6123","author":"Zhou","year":"2010","journal-title":"Applied Cryptography and Network Security, Lecture Notes in Computer Science"},{"key":"ref_36","doi-asserted-by":"crossref","unstructured":"Hiney, J., Dakve, T., Szczypiorski, K., and Gaj, K. (2015, January 24\u201327). Using Facebook for Image Steganography. Proceedings of the 10th International Conference on Availability, Reliability and Security, Toulouse, France.","DOI":"10.1109\/ARES.2015.20"},{"key":"ref_37","doi-asserted-by":"crossref","unstructured":"Jeon, J., and Cho, Y. (2019). Construction and Performance Analysis of Image Steganography-Based Botnet in KakaoTalk Openchat. Computers, 8.","DOI":"10.3390\/computers8030061"},{"key":"ref_38","unstructured":"(2020, September 28). Number of Global Monthly Active Kakaotalk Users from 1st Quarter 2013 to 2nd Quarter 2020. Available online: https:\/\/www.statista.com\/statistics\/278846\/kakaotalk-monthly-active-users-mau."},{"key":"ref_39","first-page":"32","article-title":"Implementing Covert Channels to Transfer Hidden Information over WhatsApp on Mobile Phones","volume":"6","author":"Gasimov","year":"2020","journal-title":"Am. J. Eng. Appl. Sci."},{"key":"ref_40","first-page":"217","article-title":"A Review of Image Steganalysis Techniques for Digital Forensics","volume":"40","author":"Konstantinos","year":"2018","journal-title":"J. Inf. Secur. Appl."},{"key":"ref_41","doi-asserted-by":"crossref","unstructured":"Natarajan, V., Sheen, S., and Anitha, R. (2012, January 17\u201319). Detection of StegoBot: A covert social network botnet. Proceedings of the 1st ACM International Conference on Security of Internet of Things, Kollam, India.","DOI":"10.1145\/2490428.2490433"},{"key":"ref_42","doi-asserted-by":"crossref","first-page":"679","DOI":"10.1093\/comjnl\/bxu063","article-title":"Multilevel Analysis to Detect Covert Social Botnet in Multimedia Social Networks","volume":"58","author":"Natarajan","year":"2015","journal-title":"Comput. J."},{"key":"ref_43","unstructured":"(2020, September 21). Foldersync. Available online: https:\/\/www.tacit.dk."},{"key":"ref_44","unstructured":"(2020, September 27). Xiao Steganography. Available online: https:\/\/xiao-steganography.en.softonic.com."},{"key":"ref_45","unstructured":"(2020, September 27). Stealthencrypt. Available online: http:\/\/www.stealthencrypt.com\/."},{"key":"ref_46","unstructured":"(2020, December 04). The Top 29 Steganography Open Source Projects. Available online: https:\/\/awesomeopensource.com\/projects\/steganography."},{"key":"ref_47","doi-asserted-by":"crossref","first-page":"708","DOI":"10.12720\/jcm.8.11.708-715","article-title":"Social networks IM forensics: Encryption analysis","volume":"8","author":"Barghuthi","year":"2013","journal-title":"J. Commun."},{"key":"ref_48","unstructured":"(2020, September 21). Python. Available online: https:\/\/www.python.org."}],"container-title":["Computers"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/2073-431X\/9\/4\/103\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T10:46:43Z","timestamp":1760179603000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/2073-431X\/9\/4\/103"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,12,18]]},"references-count":48,"journal-issue":{"issue":"4","published-online":{"date-parts":[[2020,12]]}},"alternative-id":["computers9040103"],"URL":"https:\/\/doi.org\/10.3390\/computers9040103","relation":{},"ISSN":["2073-431X"],"issn-type":[{"value":"2073-431X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020,12,18]]}}}