[ISN] Detecting Steganographic Content on the Internet

From: InfoSec News (isnat_private)
Date: Mon Sep 17 2001 - 02:00:28 PDT

  • Next message: InfoSec News: "[ISN] [corporatesecurity] Report From Twin Towers and NYC"

    Forwarded by: "Jay D. Dyson" <jdysonat_private>
    
    -----BEGIN PGP SIGNED MESSAGE-----
    
    Courtesy of Security Papers.
    
    - ---------- Forwarded message ----------
    Date: Sat, 15 Sep 2001 17:36:36 -0600
    From: aleph1at_private
    To: secpapersat_private
    Subject: Detecting Steganographic Content on the Internet
    
    Detecting Steganographic Content on the Internet
    Niels Provos and Peter Honeyman
    
    Steganography is used to hide the occurrence of communication. Recent 
    suggestions in US newspapers indicate that terrorists use steganography to 
    communicate in secret with their accomplices. In particular, images on the 
    internet were mentioned as the communication medium. While the newspaper 
    articles sounded very dire, none substantiated these rumors. To determine 
    whether there is steganographic content on the Internet, this paper presents 
    a detection framework that includes tools to retrieve images from the world 
    wide web and automatically detects whether they might contain steganographic 
    content. To ascertain that hidden messages exist in images, the detection 
    framework includes a distributed computing framework for launching dictionary 
    attacks hosted on a cluster of loosely coupled workstations. We have analyzed 
    two million images downloaded from eBay actions but have not been able to 
    find a single hidden message.
    
    http://www.citi.umich.edu/techreports/reports/citi-tr-01-11.pdf
    http://www.citi.umich.edu/techreports/reports/citi-tr-01-11.ps.gz
    
    - -- 
    Elias Levy
    SecurityFocus
    http://www.securityfocus.com/
    Si vis pacem, para bellum
    
    -----BEGIN PGP SIGNATURE-----
    Version: 2.6.2
    Comment: See http://www.treachery.net/~jdyson/ for current keys.
    
    iQCVAwUBO6QqoLlDRyqRQ2a9AQHGLgP/fsMhQeb3SDMuY+J6QusXlCMA+MAwNa0E
    PY/+pcuiF96E+CR2s7zNsz6E3lrLSxgIyogaJG4zVxaGlOGS25U134yZlafccmaX
    ABBiSXM08FDBs6q1do+rf15lmGPdrmzocTNNq7syIOmzDqVejVMoiG1w8gP314j3
    yDC+b121yqU=
    =SQqk
    -----END PGP SIGNATURE-----
    
    
    
    -
    ISN is currently hosted by Attrition.org
    
    To unsubscribe email majordomoat_private with 'unsubscribe isn' in the BODY
    of the mail.
    



    This archive was generated by hypermail 2b30 : Mon Sep 17 2001 - 04:44:55 PDT