Image
 
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 31 guests and 3 members online
EH-Net Donations

Enter Amount:
$

Google Ads
EH-Net News Feeds
Latest Additions
Book Recommendations





 
Advertisement

You are here: Home arrow Forum arrow Ethical Hacking Discussions and Related Certificationsarrow Forensicsarrow Steganography in the Forensics Field
Ethical Hacker Community Forums
December 01, 2008, 11:42:17 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: ChicagoCon 2-Day Ethical Hacking Conference with MS Blue Hats Oct 31 - Nov 1. Tickets Only $100! www.chicagocon.com/content/view/103/51/
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Steganography in the Forensics Field  (Read 2879 times)
0 Members and 1 Guest are viewing this topic.
harky
Newbie
*
Offline Offline

Posts: 9

Graduate student seeking Digital Forensics career


View Profile
« on: April 21, 2008, 02:03:59 PM »

My name is Daniel Harkness. I am a graduate student at Iowa State University. I have a strong interest in Computer Forensics, and am currently enrolled in a steganography (information hiding) course. For my term project I am doing some background research for a possible funding proposal to create a steganography toolkit geared towards the Computer Forensics field. As part of this background research, I would like to get an idea of how much (if any) steganography has been seen in the field thus far, and what your opinions on the topic are.

I have created a brief, anonymous survey and would appreciate your assistance. The questions on the survey ask about your experiences with steganography and what you think will be important or useful in the future. The survey consists of 10 questions (although some have multiple parts) and are a mixture of multiple choice and short answer questions. I would expect that the survey could take from 1 - 30 minutes depending on whether you have experienced steganography or not and how much detail you go into. All questions are optional and you are invited to participate even if you have no experience with steganography. No personal data will be collected.

The survey can be accessed at:
http://www.questionpro.com/akira/TakeSurvey?id=943751
(To moderator: If direct links are not allowed, please remove the link and let me know.)

Thank you very much for your time, you can PM me if you have any questions.
Logged

Iowa State University
MS Student: CprE and InfAs
BS-CprE & BS-ComS
Graduating: Dec. 2008
pseud0
Full Member
***
Offline Offline

Posts: 142



View Profile
« Reply #1 on: April 21, 2008, 03:13:42 PM »

When I was still doing investigations we would encounter this from time to time.  We had some tools that would give each file on a system a score from 1 to 5 (1 low to 5 high) that would estimate the likelihood that the file contained information obscured by steg.  It wasn't common, but it wasn't rare, to find such files.  Anything that scored a 4 or 5 got sent to No Such Agency.  Interestingly enough, it wasn't used to hide classified data, it was used to hide child pr0n.
Logged

CISSP, CISM
Artful Dodger
Newbie
*
Offline Offline

Posts: 24


View Profile
« Reply #2 on: April 29, 2008, 09:06:52 AM »

Ive never personally come across it.  I imagine that has alot to do with the types of issues ive worked with.  That takes a certain amount of skill and understanding.  Personally, I think it is something that may get bigger in the future if someone comes up with a poular tool to make it understandable and easy for the dodgey folks.

Cheers!
Shane
Logged
shakuni
Jr. Member
**
Offline Offline

Posts: 78


View Profile
« Reply #3 on: May 28, 2008, 01:40:07 AM »

Quote
For my term project I am doing some background research for a possible funding proposal to create a steganography toolkit geared towards the Computer Forensics field.
It is very easy to implement tools that hide data in image files, mp3 file or any other kind of file. It's just a matter of understanding the file format and then finding the bits in the format whose change will not effect the real work of file significantly. For example, data can be hidden in the LSBs(Least significant bits) of bmp files pixel info bits without effecting the bmp file.

But detecting good steganography is really difficult . So I suggest research further in steganalysis and statistical analysis because it is really needed to detect the covert channels of criminals.
Logged

There is no rule, law or tradition that apply universally... including this one.
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.7 | SMF © 2006-2008, Simple Machines LLC
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.046 seconds with 23 queries.
 
Sponsors

cwnp_moto__120x90.gif

Polls
During the most recent election, I:
 
Support EH-Net


Support EH-Net by
Buying all of your
Amazon items using
the search bar above.

cbtnuggets_logo_125.jpg
Try CBT Nuggets Free!
Recent Forum Topics
Vote For EH-Net

progenic.com
Click here to Vote!

Sadikhov.com
Top IT Cert Sites

binarica.com
Binarica Logo

Add to Technorati Favorites
technorati fave

 
         
Advertisement

© 2008 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.