Unicode Steganographic Exploits: Maintaining Enterprise Border Security

Unicode is rapidly becoming the preferred means for representing symbols used in creating multimedia content, especially for information that´s presented in multiple languages. This article discusses a unicode vulnerability that makes such content susceptible to being used for creation of covert channel communications. We also developed a solution architecture, the unified secure message augmentation (USMA) service. The USMA service incorporates rules (in an XML vocabulary) that we can apply to unicode transmissions that will detect an attempt to transmit a potential exploit, alert network managers to the presence of the unicode anomaly, and take action to mitigate the exploit.