[Paper Review] A Generation-based Text Steganography Method using SQL Queries

Youssef Bassil|arXiv (Cornell University)|Dec 10, 2012

Advanced Steganography and Watermarking Techniques7 references3 citations

TL;DR

This paper proposes a novel generation-based text steganography method that embeds secret messages into SQL queries by mapping each character to a randomly selected word from a categorized dictionary of 65 word categories. The method dynamically generates semantically valid SELECT queries that conceal the hidden message, demonstrating feasibility through experiments and suggesting future extension to other SQL commands for enhanced obfuscation.

ABSTRACT

Cryptography and Steganography are two techniques commonly used to secure and safely transmit digital data. Nevertheless, they do differ in important ways. In fact, cryptography scrambles data so that they become unreadable by eavesdroppers; while, steganography hides the very existence of data so that they can be transferred unnoticed. Basically, steganography is a technique for hiding data such as messages into another form of data such as images. Currently, many types of steganography are in use; however, there is yet no known steganography application for query languages such as SQL. This paper proposes a new steganography method for textual data. It encodes input text messages into SQL carriers made up of SELECT queries. In effect, the output SQL carrier is dynamically generated out of the input message using a dictionary of words implemented as a hash table and organized into 65 categories, each of which represents a particular character in the language. Generally speaking, every character in the message to hide is mapped to a random word from a corresponding category in the dictionary. Eventually, all input characters are transformed into output words which are then put together to form an SQL query. Experiments conducted, showed how the proposed method can operate on real examples proving the theory behind it. As future work, other types of SQL queries are to be researched including INSERT, DELETE, and UPDATE queries, making the SQL carrier quite puzzling for malicious third parties to recuperate the secret message that it encodes.

Motivation & Objective

• To develop a steganography technique that conceals text messages within SQL queries, leveraging the syntactic structure of SQL for undetectable data transmission.
• To address the lack of steganographic methods for query languages like SQL, which remain unexplored in existing literature.
• To ensure the steganographic carrier (SQL query) appears legitimate and semantically valid to evade detection by adversaries.
• To enable dynamic generation of SQL carriers from input messages using a structured, categorized dictionary of words.
• To lay the foundation for extending the method to other SQL operations such as INSERT, DELETE, and UPDATE for increased obfuscation.

Proposed method

• The method uses a hash table-based dictionary with 65 categories, each representing a distinct character in the language, to map input message characters to words.
• Each character in the secret message is mapped to a random word from its corresponding category in the dictionary to ensure variability and reduce pattern detection.
• The mapped words are assembled into a syntactically correct SQL SELECT query, preserving the structure and semantics of standard SQL syntax.
• The output is a dynamically generated SQL query that appears as a legitimate database query but embeds the hidden message in its word composition.
• The dictionary is organized to allow efficient lookup and mapping of characters to words, supporting case-insensitive or case-sensitive encoding based on implementation.
• Future work aims to extend the method to other SQL commands (e.g., INSERT, UPDATE, DELETE) to diversify carrier types and enhance stealth.

Experimental results

Research questions

• RQ1 Can a steganographic method effectively embed text messages within SQL queries while maintaining syntactic and semantic validity?
• RQ2 How can a dictionary of words be structured to enable reliable and reversible mapping of characters to words in a way that supports dynamic query generation?
• RQ3 To what extent can the generated SQL queries remain indistinguishable from real database queries to avoid detection by eavesdroppers?
• RQ4 What are the feasibility and security implications of using only SELECT queries for steganographic encoding, and how might extending to other SQL commands improve resilience?
• RQ5 How can the method ensure that the hidden message remains recoverable despite the random selection of words from each category?

Key findings

• The proposed method successfully generates semantically valid SQL queries that embed hidden messages through word mapping, demonstrating the feasibility of steganography in SQL-based systems.
• Experiments confirmed that the method can encode and decode messages using dynamically generated queries, validating the core theory of the approach.
• The use of a categorized dictionary with 65 categories enables systematic encoding of characters, supporting full-alphabet or extended character set representation.
• The method maintains message integrity and recoverability through deterministic mapping despite random word selection within each category.
• The approach shows potential for extension to other SQL commands such as INSERT, DELETE, and UPDATE, which could further obscure the steganographic carrier from analysis.
• The generated SQL carriers are indistinguishable from real database queries in structure, enhancing resistance to detection by malicious third parties.