Home page logo
/

isn logo Information Security News mailing list archives

Detecting Steganographic Content on the Internet
From: InfoSec News <isn () c4i org>
Date: Mon, 17 Sep 2001 04:00:28 -0500 (CDT)

Forwarded by: "Jay D. Dyson" <jdyson () treachery net>

-----BEGIN PGP SIGNED MESSAGE-----

Courtesy of Security Papers.

- ---------- Forwarded message ----------
Date: Sat, 15 Sep 2001 17:36:36 -0600
From: aleph1 () securityfocus com
To: secpapers () securityfocus com
Subject: Detecting Steganographic Content on the Internet

Detecting Steganographic Content on the Internet
Niels Provos and Peter Honeyman

Steganography is used to hide the occurrence of communication. Recent 
suggestions in US newspapers indicate that terrorists use steganography to 
communicate in secret with their accomplices. In particular, images on the 
internet were mentioned as the communication medium. While the newspaper 
articles sounded very dire, none substantiated these rumors. To determine 
whether there is steganographic content on the Internet, this paper presents 
a detection framework that includes tools to retrieve images from the world 
wide web and automatically detects whether they might contain steganographic 
content. To ascertain that hidden messages exist in images, the detection 
framework includes a distributed computing framework for launching dictionary 
attacks hosted on a cluster of loosely coupled workstations. We have analyzed 
two million images downloaded from eBay actions but have not been able to 
find a single hidden message.

http://www.citi.umich.edu/techreports/reports/citi-tr-01-11.pdf
http://www.citi.umich.edu/techreports/reports/citi-tr-01-11.ps.gz

- -- 
Elias Levy
SecurityFocus
http://www.securityfocus.com/
Si vis pacem, para bellum

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2
Comment: See http://www.treachery.net/~jdyson/ for current keys.

iQCVAwUBO6QqoLlDRyqRQ2a9AQHGLgP/fsMhQeb3SDMuY+J6QusXlCMA+MAwNa0E
PY/+pcuiF96E+CR2s7zNsz6E3lrLSxgIyogaJG4zVxaGlOGS25U134yZlafccmaX
ABBiSXM08FDBs6q1do+rf15lmGPdrmzocTNNq7syIOmzDqVejVMoiG1w8gP314j3
yDC+b121yqU=
=SQqk
-----END PGP SIGNATURE-----



-
ISN is currently hosted by Attrition.org

To unsubscribe email majordomo () attrition org with 'unsubscribe isn' in the BODY
of the mail.


  By Date           By Thread  

Current thread:
  • Detecting Steganographic Content on the Internet InfoSec News (Sep 17)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault