TechKnowSurge

VideoSecurityFree

Stealth Technique: Traffic Fragmentation

Traffic fragmentation is a stealth technique that breaks data into smaller segments before transmission, making the overall payload harder to detect or identify in transit. Splitting traffic this way conceals the true nature or intent of what is being moved across a network.

⚑ Complete this video to capture a CTF flag worth 1 point.

About this video

Traffic fragmentation is a network-based stealth technique in which data is deliberately divided into smaller segments before being transmitted, making it significantly harder for security controls to identify or flag the overall payload. A complete file or message moving from a compromised host to an external attacker may be easily recognizable as suspicious traffic, but when broken into individual fragments, each piece appears relatively benign and is far less likely to attract attention from monitoring systems or intrusion detection tools. This approach is particularly effective for data exfiltration, where the goal is to move sensitive information out of a target network without triggering alerts. Because no single fragment reveals the full picture of what is being transmitted, the true intent of the communication is obscured throughout the transfer. Understanding fragmentation as an attack technique is essential for security professionals responsible for designing detection strategies, configuring network monitoring tools, and defending against evasion-based threats.

What you'll learn

Explain how traffic fragmentation is used as a stealth technique to evade network detection by concealing the true nature of transmitted data

What's covered

Traffic Fragmentation

What It Is
- Stealth technique
- Breaks data into segments
How It Works
- Split traffic into fragments
- Send fragments separately
- Reassemble at destination
Purpose
- Hide true intention
- Less recognizable traffic
- Conceal exfiltrated data
Attack Scenario
- Compromised internal host
- Adversary on outside
- Data sent across network

Key terms

Packet: A unit of data formatted for transmission over a network, containing a header, payload, and sometimes a trailer.
Payload: The actual data content of a packet or message, excluding headers and metadata.
Data Exfiltration: The unauthorized transfer of data from a system to an external destination.
Intrusion Detection System: A system that monitors network or system activities for malicious behavior and generates alerts.
Traffic Fragmentation: A technique that breaks network traffic into smaller packets or segments to evade inspection by intrusion detection systems.

Topics

Traffic Fragmentation Evasion Techniques Network Security Packet Analysis Intrusion Detection Stealth Techniques Networking

Transcript

Traffic Fragmentation

Another stealth technique would be traffic fragmentation. We could break apart traffic into smaller components and send it across so it's less recognizable.

If we were to send a message from our compromised computer to us sitting on the outside as the adversary, then maybe this is pretty recognizable and it's obvious what's going on. Maybe it's a picture, maybe it's some sort of in message, whatever the case may be. Maybe it just is very apparent what it is, but maybe any one component of it is not that big of a deal. So we could break it apart into fragments and then send it over. And then by doing so, we hide what the true intention is, what we're trying to get out of the network or trying to get across this network.

So fragmentation is one way that we can go about doing this stealth. So here's that attack card on fragmentation. It's breaking the data into smaller segments and then sending it.

Read the full transcript Show less

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →