Security News > 2001 > September > Detecting Steganographic Content on the Internet

Detecting Steganographic Content on the Internet
2001-09-17 09:00

Forwarded by: "Jay D. Dyson" -----BEGIN PGP SIGNED MESSAGE----- Courtesy of Security Papers. - ---------- Forwarded message ---------- Date: Sat, 15 Sep 2001 17:36:36 -0600 From: aleph1 () securityfocus com To: secpapers () securityfocus com Subject: Detecting Steganographic Content on the Internet Detecting Steganographic Content on the Internet Niels Provos and Peter Honeyman Steganography is used to hide the occurrence of communication. Recent suggestions in US newspapers indicate that terrorists use steganography to communicate in secret with their accomplices. In particular, images on the internet were mentioned as the communication medium. While the newspaper articles sounded very dire, none substantiated these rumors. To determine whether there is steganographic content on the Internet, this paper presents a detection framework that includes tools to retrieve images from the world wide web and automatically detects whether they might contain steganographic content. To ascertain that hidden messages exist in images, the detection framework includes a distributed computing framework for launching dictionary attacks hosted on a cluster of loosely coupled workstations. We have analyzed two million images downloaded from eBay actions but have not been able to find a single hidden message. http://www.citi.umich.edu/techreports/reports/citi-tr-01-11.pdf http://www.citi.umich.edu/techreports/reports/citi-tr-01-11.ps.gz - -- Elias Levy SecurityFocus http://www.securityfocus.com/ Si vis pacem, para bellum -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: See http://www.treachery.net/~jdyson/ for current keys. iQCVAwUBO6QqoLlDRyqRQ2a9AQHGLgP/fsMhQeb3SDMuY+J6QusXlCMA+MAwNa0E PY/+pcuiF96E+CR2s7zNsz6E3lrLSxgIyogaJG4zVxaGlOGS25U134yZlafccmaX ABBiSXM08FDBs6q1do+rf15lmGPdrmzocTNNq7syIOmzDqVejVMoiG1w8gP314j3 yDC+b121yqU= =SQqk -----END PGP SIGNATURE----- - ISN is currently hosted by Attrition.org To unsubscribe email majordomo () attrition org with 'unsubscribe isn' in the BODY of the mail.


News URL

http://www.citi.umich.edu/techreports/reports/citi-tr-01-11.pdf