Steganography: Hiding In Plain Sight

Thursday, October 18, 2012

Alan Woodward

01ceb9281b3fb3dbb90c3efbe327717e

I recently wrote a short piece for the BBC Technology website in which I tried to explain why steganography (as opposed to cryptography) posed a very particular threat. 

Or least it might do. 

The trouble is we don't really know, and the default position has been to assume that because we haven't discovered it being used en masse the threat is negligible.

For those who have been asking to learn more about steganography I would recommend beginning with the following sites:

  • Wikipedia which in recent times has been updated with some really good introductory material on the subject including a bit about its history and the many forms it can take.
  •  Dr Neil Johnson's introduction produced by a man who has been studying the subject for nearly 20 years and gives both introductory notes and some good further pointers to more advanced material.
  • Dr Niels Provos site which is produced by someone I tried to think of as synonymous with the production of leading steganographic tools such as Outguess.
  • SARC which is a centre of excellence for the subject and holds a large database of tools and techniques in use.
  • SANS reading room has a number of relatively recent papers discussing steganographic techniques and tools across a variety of digital media.

After that you really need to be looking at the text books. My personal favourites are:

Cross-posted from Professor Alan Woodward

Possibly Related Articles:
9598
General
Information Security
Encryption Threats Steganography Infosec
Post Rating I Like this!
The views expressed in this post are the opinions of the Infosec Island member that posted this content. Infosec Island is not responsible for the content or messaging of this post.

Unauthorized reproduction of this article (in part or in whole) is prohibited without the express written permission of Infosec Island and the Infosec Island member that posted this content--this includes using our RSS feed for any purpose other than personal use.