Defeating MageCart Attacks in a NAISS Way

Catalin Rus; Dipti Kapoor Sarmah; Mohammed El-hajj

doi:10.5220/0012079300003555

Defeating MageCart Attacks in a NAISS Way

Catalin Rus^*
, Dipti Kapoor Sarmah^*
, Mohammed El-hajj^*

^*Corresponding author for this work

Semantics, Cybersecurity & Services

Research output: Chapter in Book/Report/Conference proceeding › Chapter › Academic › peer-review

5 Citations (Scopus)

224 Downloads (Pure)

Abstract

MageCart attacks pose a security threat to E-commerce platforms by using e-skimmers to steal payment details. Image steganography is used by attackers to conceal e-skimmers, making detection challenging. Existing solutions have limitations, such as incompatibility or insufficient functionality. This research proposes NAISS, a server-side middlebox solution that leverages digital signatures to filter unauthorized images without requiring client-side modifications. The proof-of-concept implementation demonstrates the efficacy of NAISS, filtering 100% of state of the art stegoimages, while indicating areas for further improvement.

Original language	English
Title of host publication	Proceedings of the 20th International Conference on Security and Cryptography (SECRYPT 2023)
Editors	Sabrina De Capitani di Vimercati, Pierangela Samarati
Place of Publication	Setúbal, Portugal
Publisher	SCITEPRESS
Pages	691-697
Number of pages	7
Volume	1
ISBN (Electronic)	978-989-758-666-8
ISBN (Print)	9789897586668
DOIs	https://doi.org/10.5220/0012079300003555
Publication status	Published - 2023
Event	20th International Conference on Security and Cryptography, SECRYPT 2023 - Rome, Italy Duration: 10 Jul 2023 → 12 Jul 2023 Conference number: 20

Conference

Conference	20th International Conference on Security and Cryptography, SECRYPT 2023
Abbreviated title	SECRYPT 2023
Country/Territory	Italy
City	Rome
Period	10/07/23 → 12/07/23

Keywords

Digital Signatures
E-commerce
E-skimmers
Image Steganography
MageCart
Middlebox
Network Filter

Access to Document

10.5220/0012079300003555Licence: CC BY-NC-ND

120793Final published version, 867 KBLicence: CC BY-NC-ND

Cite this

@inbook{ceb02b4b4a8a4c388659e21252fe1e7e,

title = "Defeating MageCart Attacks in a NAISS Way",

abstract = "MageCart attacks pose a security threat to E-commerce platforms by using e-skimmers to steal payment details. Image steganography is used by attackers to conceal e-skimmers, making detection challenging. Existing solutions have limitations, such as incompatibility or insufficient functionality. This research proposes NAISS, a server-side middlebox solution that leverages digital signatures to filter unauthorized images without requiring client-side modifications. The proof-of-concept implementation demonstrates the efficacy of NAISS, filtering 100\% of state of the art stegoimages, while indicating areas for further improvement.",

keywords = "Digital Signatures, E-commerce, E-skimmers, Image Steganography, MageCart, Middlebox, Network Filter",

author = "Catalin Rus and Sarmah, \{Dipti Kapoor\} and Mohammed El-hajj",

year = "2023",

doi = "10.5220/0012079300003555",

language = "English",

isbn = "9789897586668",

volume = "1",

pages = "691--697",

editor = "\{De Capitani di Vimercati\}, Sabrina and Pierangela Samarati",

booktitle = "Proceedings of the 20th International Conference on Security and Cryptography (SECRYPT 2023)",

publisher = "SCITEPRESS",

note = "20th International Conference on Security and Cryptography, SECRYPT 2023, SECRYPT 2023 ; Conference date: 10-07-2023 Through 12-07-2023",

}

Rus, C, Sarmah, DK & El-hajj, M 2023, Defeating MageCart Attacks in a NAISS Way. in S De Capitani di Vimercati & P Samarati (eds), Proceedings of the 20th International Conference on Security and Cryptography (SECRYPT 2023). vol. 1, SCITEPRESS, Setúbal, Portugal, pp. 691-697, 20th International Conference on Security and Cryptography, SECRYPT 2023, Rome, Italy, 10/07/23. https://doi.org/10.5220/0012079300003555

Defeating MageCart Attacks in a NAISS Way. / Rus, Catalin; Sarmah, Dipti Kapoor; El-hajj, Mohammed.
Proceedings of the 20th International Conference on Security and Cryptography (SECRYPT 2023). ed. / Sabrina De Capitani di Vimercati; Pierangela Samarati. Vol. 1 Setúbal, Portugal: SCITEPRESS, 2023. p. 691-697.

Research output: Chapter in Book/Report/Conference proceeding › Chapter › Academic › peer-review

TY - CHAP

T1 - Defeating MageCart Attacks in a NAISS Way

AU - Rus, Catalin

AU - Sarmah, Dipti Kapoor

AU - El-hajj, Mohammed

N1 - Conference code: 20

PY - 2023

Y1 - 2023

N2 - MageCart attacks pose a security threat to E-commerce platforms by using e-skimmers to steal payment details. Image steganography is used by attackers to conceal e-skimmers, making detection challenging. Existing solutions have limitations, such as incompatibility or insufficient functionality. This research proposes NAISS, a server-side middlebox solution that leverages digital signatures to filter unauthorized images without requiring client-side modifications. The proof-of-concept implementation demonstrates the efficacy of NAISS, filtering 100% of state of the art stegoimages, while indicating areas for further improvement.

AB - MageCart attacks pose a security threat to E-commerce platforms by using e-skimmers to steal payment details. Image steganography is used by attackers to conceal e-skimmers, making detection challenging. Existing solutions have limitations, such as incompatibility or insufficient functionality. This research proposes NAISS, a server-side middlebox solution that leverages digital signatures to filter unauthorized images without requiring client-side modifications. The proof-of-concept implementation demonstrates the efficacy of NAISS, filtering 100% of state of the art stegoimages, while indicating areas for further improvement.

KW - Digital Signatures

KW - E-commerce

KW - E-skimmers

KW - Image Steganography

KW - MageCart

KW - Middlebox

KW - Network Filter

U2 - 10.5220/0012079300003555

DO - 10.5220/0012079300003555

M3 - Chapter

SN - 9789897586668

VL - 1

SP - 691

EP - 697

BT - Proceedings of the 20th International Conference on Security and Cryptography (SECRYPT 2023)

A2 - De Capitani di Vimercati, Sabrina

A2 - Samarati, Pierangela

PB - SCITEPRESS

CY - Setúbal, Portugal

T2 - 20th International Conference on Security and Cryptography, SECRYPT 2023

Y2 - 10 July 2023 through 12 July 2023

ER -

Defeating MageCart Attacks in a NAISS Way

Abstract

Conference

Keywords

Access to Document

Fingerprint

Cite this