STUDY OF TCP FOR TRANSMISSION STEGANOGRAPHIC MESSAGES

students of the department of information systems security «South Ural State University». Email: personal@mainnika.ru

Candidate of Physics and Mathematics, Associate Professor, Lecturer, Department of Information Systems Security, Chelyabinsk. E-mail: toddeath@yandex.ru

738.5.057.4 : 003.27 + 004.738.2 : 003.27

This article discusses the creation of Netfilter kernel modules linux flush message transmission via the Internet through the use of protocol TCP. Also in the framework of the solved tasks such as flow control messages to various destinations, and the interaction between the user and modules. We offer instead of changing the source code of the Linux kernel to use plug-ins dynamically Netfilter. Using Netfilter module allows you to capture any packets for sending and receiving, as well as to change them in any way. As part of this work was created two modules Netfilter: sending module and the module receiving messages. These modules can be connected via a standard mechanism for the registration module on any computer system Linux.vzaimodeystvuet with the protected program, the learning process is called a process of reverse (reverse) engineering. This process often depends on the properties of the human psyche, so the use of these properties can reduce the efficiency of the process of reverse engineering. Obfuscation (“obfuscation” - trapping), is one of the methods to protect code that allows you to complicate the process of reverse engineering of code protected software. Obfuscation could be applied not only to protect the PP, it has wider application, for example it may be used creators of viruses to protect their creations, etc.