[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[FYI] [ISN] Detecting Steganographic Content on the Internet

Forwarded Message
von    : InfoSec News <isn@c4i.org>
Datum  : Montag, 17. September 2001, 11:00

-----Begin Forwarded Message-----

Forwarded by: "Jay D. Dyson" <jdyson@treachery.net>

-----BEGIN PGP SIGNED MESSAGE-----

Courtesy of Security Papers.

- ---------- Forwarded message ----------
Date: Sat, 15 Sep 2001 17:36:36 -0600
From: aleph1@securityfocus.com
To: secpapers@securityfocus.com
Subject: Detecting Steganographic Content on the Internet

Detecting Steganographic Content on the Internet
Niels Provos and Peter Honeyman

Steganography is used to hide the occurrence of communication. Recent 
suggestions in US newspapers indicate that terrorists use steganography to 
communicate in secret with their accomplices. In particular, images on the 
internet were mentioned as the communication medium. While the newspaper 
articles sounded very dire, none substantiated these rumors. To determine 
whether there is steganographic content on the Internet, this paper presents 
a detection framework that includes tools to retrieve images from the world 
wide web and automatically detects whether they might contain steganographic 
content. To ascertain that hidden messages exist in images, the detection 
framework includes a distributed computing framework for launching dictionary 
attacks hosted on a cluster of loosely coupled workstations. We have analyzed 
two million images downloaded from eBay actions but have not been able to 
find a single hidden message.

http://www.citi.umich.edu/techreports/reports/citi-tr-01-11.pdf
http://www.citi.umich.edu/techreports/reports/citi-tr-01-11.ps.gz

- -- 
Elias Levy
SecurityFocus
http://www.securityfocus.com/
Si vis pacem, para bellum

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2
Comment: See http://www.treachery.net/~jdyson/ for current keys.

iQCVAwUBO6QqoLlDRyqRQ2a9AQHGLgP/fsMhQeb3SDMuY+J6QusXlCMA+MAwNa0E
PY/+pcuiF96E+CR2s7zNsz6E3lrLSxgIyogaJG4zVxaGlOGS25U134yZlafccmaX
ABBiSXM08FDBs6q1do+rf15lmGPdrmzocTNNq7syIOmzDqVejVMoiG1w8gP314j3
yDC+b121yqU=
=SQqk
-----END PGP SIGNATURE-----



-
ISN is currently hosted by Attrition.org

To unsubscribe email majordomo@attrition.org with 'unsubscribe isn' in the BODY
of the mail.


-----End Forwarded Message-----



Ciao
Kai
-- 
Homepage: http://beam.to/raven
German PGP&GnuPG tutorial: 
http://home.nexgo.de/kraven/pgp/pgpanltg.htm