Hidden Channels in the Cloud: Two-Layer Detection of Steganography in OCI Images, from Static Bytes to Runtime Extraction

Attackers are exploiting container image layers to hide malware from traditional security scanners. This research presents a new two-step detector that uses static analysis and dynamic eBPF monitoring to catch these hidden payloads before and during runtime.

Authors

Publication Details

Journal
Zenodo (CERN European Organization for Nuclear Research)
Published
2026-09-01
DOI
https://doi.org/10.5281/zenodo.21916966
Primary Topic
Advanced Steganography and Watermarking Techniques
Type
preprint
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
preprint

Hidden Channels in the Cloud: Two-Layer Detection of Steganography in OCI Images, from Static Bytes to Runtime Extraction

Yahia Charif
Zenodo (CERN European Organization for Nuclear Research)
Advanced Steganography and Watermarking Techniques
preprint

Hidden Channels in the Cloud: Two-Layer Detection of Steganography in OCI Images, from Static Bytes to Runtime Extraction

Yahia Charif
preprint en

Abstract

Attackers are exploiting container image layers to hide malware from traditional security scanners. This research presents a new two-step detector that uses static analysis and dynamic eBPF monitoring to catch these hidden payloads before and during runtime.

Zenodo (CERN European Organization for Nuclear Research)
Advanced Steganography and Watermarking Techniques
DOIOpen Access PDFOpenAlex
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.