2007年4月25日 星期三
[知識]Null Cyber
本來想直接回應的
可是我沒那個膽啦...
只好偷偷的在這邊寫我亂想的答案...
**********我是從boss blog上複製過來的文章 原文在這************
上個星期逛台北捷運的地下書街, 看到了這本《中醫藥典故與傳說》,
第七章的醫家軼聞, 我首先閱讀了我較為熟悉的醫聖張仲景部份,
其中有一個故事就是張仲景利用 Null Cipher 這樣的技術巧戲庸官, 故事中的方子如下:
柏子仁三錢
木瓜二錢
官桂二錢
柴胡三錢
益智二錢
附子二錢
八角二錢
人蔘一錢
台烏三錢
上党三錢
山藥二錢
**********我是從boss blog上複製過來的文章 原文在這************
將每句話的第一個字抽出來就是
薄木棺財一附八人抬上山
其實他在詛咒他死吧...XDD
真是凶狠...XD
好了
為了證實我的猜測沒錯
到wikipedia上查了NULL CYBER這個字...
不愧是wiki 果然查的到...
雖然是英文...
沒關係...你嚇不倒我的!!
感覺是跟LSB很像阿
都是藏在頭或尾的
可是老闆又說有點不太一樣
嘖...
boss叫我看清楚耶
是因為他偽裝後的東西很正常 不像被改變過的東西
而LSB是改變東西去藏資訊嗎...
我再想想看好了...
今天就先這樣好了
2007年4月9日 星期一
2007年4月6日 星期五
[知識]modulation v.s. modification
英文是很重要滴!!
凶狠的阿梅與我
硬是要拖一個共犯XDD
明明人家只是在場而已...
那天在六樓遇到辛老師
就硬上拜託老師幫我們解答了...
(老師內心的OS:為什麼要問我...囧...)
modulation 和 modification 根據辛老師的意思是說
所謂的modulation
就是沒有改變的改變...
只是為了怕傳送的時候...
因為介質之類的造成值的改變
所以所以就先調整它的值讓他不會因衰變而整個改變..
--以下是cosine嘗試用自己的方法講的--
從甲方傳到乙方的過程
可以看成
1.甲(原本的值"㊣"先moxxxxx變成"★")
↓
2."★"在路上遇到干擾都很帥氣的維持差不多的樣子
↓
3.乙(再把"★"demxxxx回"㊣")
modification 就是"改變" (1→0) ...
所以說...
A > B 經過modulation之後 還是 A' > B'...
A > B 經過modification 之後 有可能變成 B' > A'
應該是這樣吧...
◆◆◆◆◆◆◆◆辛老師課外小常識◆◆◆◆◆◆◆◆◆◆
◆ ◆
◆ 以前用來撥接用的那個modem阿 ◆
◆ ◆
◆ 就是 ◆
◆ ◆
◆ Modulator和demodulator ◆
◆ ◆
◆ 的合體喔! ◆
◆ ◆
◆◆◆◆◆◆◆◆◆◆◆◆◆◆◆◆◆◆◆◆◆◆◆◆◆◆
--
聽說老師的師傅可以隔山打牛...
不知道老師可不可以隔著牆壁把我打飛...XDD
2007年4月2日 星期一
[知識]Conference v.s.Journal
有分成conference和Journal
所謂的conference呢
就是研討會啦...
大概都不會超過10頁
這種研討會的目的呢
就是讓大家可以聚在一起討論東西
看可不可以激盪出一些想法
所以和Journal相較之下
就比較輕鬆啦
不過也不一定啦
應該也是有專門給厲害人物用的conference吧...XDD
而Journal 就比較嚴謹啦
這類的期刊阿
都是厚厚的一本的
要求也比較嚴謹
--
嘖嘖
PTT的碩士板都沒說這個
這是我上次硬著頭皮去問BOSS的
應該是這樣吧
2007年3月28日 星期三
2007年3月27日 星期二
[閒聊]Cyber warfare的作者
看到那兩位作者的名字
就有在猜他們是不是華人...
可惜後來陷入查字典的地獄中...
就沒去多想了...
後來查字典查煩了...
剛好跟kenn閒聊到看paper的方法
像我正在看的Cyber warfare paper這種短短的paper阿
一定都還有另一篇厚厚的paper的啦
而且這兩位作者
ㄧ隻在香港
ㄧ隻在上海
怎麼看都是會中文的人
那本厚厚的paper是中文的機率一定很大的阿
ㄧ定也是先中翻英
再被我英翻中的閱讀的
那我幹麻不試試看找原本的中文阿
這樣翻譯來翻譯去
那個語意就有差了吧
於是乎我也google這兩位作者
(其實有點好奇他們怎麼會一起發表...)
王朔中教授 在上海大學
也是做資訊隱藏之類的
另ㄧ位就真的是很難懂阿
網頁都英文的
嘖!!我想睡覺了 今天先到這好了....
[觀念]delicious
在這邊可不只是"好吃的"意思喔
delicious這個網站
其實有點像進化版的我的最愛的功能
你可以把它想像成Label...
可是呢
他又可以對"其他網頁"下標籤與註解
(有點像可以到處帶著走又可以自己對它分類的"我的最愛")
自從開始用blogger之後
我覺得最不習慣的就是標籤(Label)了
其實我還蠻喜歡label這個功能的
可以對一篇文章做很多不同的分類
可是呢
下太多不同標籤之後
旁邊的那個Label 欄位
真的是落落長...
有點礙眼...
不知道為什麼
老師提到delicious的時候
我就直覺想到
之前有在Edward(梁老師的學生吧)的blog上看到他有用"標籤雲"這種東西
那時候應該是還在推廣期吧
那時候就覺得還蠻炫的
不過看起來有點凌亂(似乎是根據某種規則決定字的大小)
後來google了一下
哈哈哈
兩者之間果然有關係
看我們的對岸同胞寫的網誌
Tagrolls - del.icio.us的标签云服务
不過現在blogger也可以不需要透過del.icio.us就可以產生標籤雲囉
為Blogger添加标签云
我想這個網站的帥氣之處
應該是在於它都是英文介面吧
其實我還用不太順手
在這邊介紹一下黑米部落格
他是中文的
感覺有親切感多了
不過似乎是偏向玩樂面比較多
大概是boss在給我們看del.icio.us的時候
用的tag都是比較偏向學術性質吧
總覺得他steganography的論文還真不少
我想衝著reference這點
我再怎麼樣都會想辦法跟他混熟的啦
雖然我現在只練習到新增link...
等我跟這個網頁再熟一點
我就要換標籤雲了
哼!!
2007年3月20日 星期二
[paper]Cyber warfare: steganography vs. steganalysis
---以下是被我偷偷排版過的原文+Boss畫的重點XDD--
Cyber warfare: steganography vs. steganalysis
by Huaiqing Wang, Shuozhong Wang
Communications of the ACM Volume 47, Number 10
For every clever method and tool being developed to hide information in multimedia data, an equal number of clever methods and tools are being developed to detect and reveal its secrets.
Hiding Data
The rise of the Internet and multimedia techniques in the mid-1990s has prompted increasing interest in hiding data in digital media. Early research concentrated on watermarking to protect copyrighted multimedia products (such as images, audio, video, and text) [1, 8]. Data embedding has also been found to be useful in covert communication, or steganography. The goal was and still is to convey messages under cover, concealing the very existence of information exchange.
Compared to watermarking, steganography has drawn less attention until recently, as computer specialists, signal-processing researchers, and multimedia product vendors concerned about information security have recognized that illicit use of the technique might become a threat to the security of the worldwide information infrastructure [6]. Researchers have thus begun to study steganalysis, or the detection of embedded information. Detecting secret data hidden in millions of multimedia items downloadable from online sites is recognized as an especially difficult task [10].
The idea and practice of hiding information exchange has a long history. Traditional techniques of steganography, or covered writing in Greek, ranged from tattooing the shaved head of a trusted messenger during ancient times (as reported by the 5th century Greek historian Herodotus) to using invisible ink during the two World Wars in the 20th century. Modern steganography employs digital media content as camouflage, powerful computers and signal-processing techniques to hide secret data, and methods to distribute stego-media throughout cyberspace, thus posing a serious challenge to scientists and professionals alike in the field of information security.
The two major branches of information hiding, steganography and watermarking, share many characteristics. They also differ in a number of ways, including purpose, specifications, and detection/extraction methods (see Table 1). The most fundamental difference is that the object of communication in watermarking is the host signal, with the embedded data providing copyright protection. In steganography the object to be transmitted is the embedded message, and the cover signal serves as an innocuous disguise chosen fairly arbitrarily by the user based on its technical suitability. In addition, the existence of a watermark is often declared openly, and any attempt to remove or invalidate the embedded content renders the host useless. The crucial requirement for steganography is perceptual and algorithmic undetectability. Robustness against malicious attack and signal processing is not the primary concern, as it is for watermarking.
Steganography also differs from cryptography, which does not conceal the communication itself but only scrambles the data to prevent eavesdroppers understanding the content. Cryptography involves various methods and implementations. Steganography, on the other hand, is a relatively new area of study, as reflected in the research focus of published papers. Steganography and cryptography may be considered complementary and orthogonal. Anyone engaging in secret communication can always apply a cryptographic algorithm to the data before embedding it to achieve additional security. In any case, once the presence of hidden information is revealed or even suspected, the purpose of steganography is defeated, even if the message content is not extracted or deciphered.
Steganographic Techniques
Images are the most popular cover media for steganography and can be stored in a straightforward bitmap format (such as BMP) or in a compressed format (such as JPEG). Palette images are usually in the GIF format. Information hiding is accomplished either in the space domain or in the frequency domain. In terms of insertion schemes, several methods (such as substitution, addition, and adjustment) can be used. One adjustment approach is Quantization Index Modulation (QIM), which uses different quantizers to carry different bits of the secret data [2]. Although a simple unified method for classifying these techniques does not exist, some popular approaches are used in downloadable steganographic tools or found in the literature (see Table 2).
LSB modification. These techniques are based on modifying the least significant bits (LSBs), of the pixel values in the space domain. In a basic implementation, these pixels replace the entire LSB-plane with the stego-data; on average, 50% of the LSBs are flipped (see Figure 1). It can be shown that fidelity of the stego-image measured in peak-signal-to-noise ratio with respect to the cover is 51.1dB, representing a very high degree of imperceptibility compared to the lower bound of 39dB generally accepted by researchers of watermarking. With more sophisticated schemes in which embedding locations are adaptively selected, depending on human vision characteristics, even less distortion is achievable. Popular tools include EzStego, S-Tools, and Hide and Seek. In general, simple LSB embedding is susceptible to image processing, especially lossy compression.
| Figure 1 A basic LSB approach. Bit-planes of a grayscale image are sketched on the left with MSB on top. Dark and light boxes represent binary values 0s and 1s, respectively, of the pixels on different bit-planes. The LSB-plane of the cover image on the top right is replaced with the hidden data in the middle, which becomes the LSB-plane of the stego-image. The bottom-right map indicates differences between LSB planes of the cover- and stego-images. Circles represent the flipped bits; with an average of 50% bits in the LSB plane changed, the stego-image is visually identical to the cover. |
Masking approaches. These techniques are similar to visible watermarking in which pixel values in masked areas are raised or lowered by some percentage. Reducing the increment to a certain degree makes the mark invisible. In the patchwork method, pairs of patches are selected pseudo-randomly; pixel values in each pair are raised by a small constant value in one patch and lowered by the same amount in the other.
Transform domain techniques. Data embedding performed in the transform domain is widely used for robust watermarking. Similar techniques can also realize large-capacity embedding for steganography. Candidate transforms include discrete cosine transform (DCT), discrete wavelet transform (DWT), and discrete Fourier transform (DFT). By being embedded in the transform domain, the hidden data resides in more robust areas, spread across the entire image, and provides better resistance against signal processing. Various methods are available. For example, we can perform a block DCT and, depending on payload and robustness requirements, choose one or more components in each block to form a new data group that, in turn, is pseudo-randomly scrambled and undergoes a second-layer transformation. Modification is then carried out on the double transform domain coefficients using various schemes.
Techniques incorporated in compression algorithms. The idea is to integrate the data-embedding with an image-compression algorithm (such as JPEG). For example, the steganographic tool Jpeg-Jsteg takes a lossless cover-image and the message to be hidden to generate a JPEG stego-image. In the coding process, DCT coefficients are rounded up or down according to individual bits to be embedded. Such techniques are attractive because JPEG images are popular on the Internet. Other transforms (such as DFT and wavelet transform) can also be used.
Spread-spectrum techniques. The hidden data is spread throughout the cover-image based on spread-spectrum techniques (such as frequency hopping). A stego-key is used for encryption to randomly select the frequency channels. White Noise Storm is a popular tool using this technique. In other research [7], with embedded data as the object to be transmitted, the cover-image is viewed as interference in a covert communication framework. The embedded data is first modulated with pseudo-noise so the energy is spread over a wide frequency band, achieving only a very low level of embedding strength. This is valuable in achieving imperceptibility.
The three most important requirements that must be satisfied for any steganographic system are: security of the hidden communication; size of the payload; and robustness against malicious and unintentional attacks.
Security. In order to avoid raising the suspicions of eavesdroppers, while evading the meticulous screening of algorithmic detection, the hidden contents must be invisible both perceptually and statistically [5]. Some information-theoretic-based definitions for a perfectly secure system assume detailed knowledge of the statistics of the cover and require unlimited computational resources. These conditions cannot be strictly met in real-world steganographic applications. For example, regarding statistical knowledge, one may be able to estimate the statistics of a particular ensemble of signals frequently used by a certain group of people and establish a model for detection. But such models are meaningless if the estimation error exceeds the extent of modifications caused by embedding. Moreover, the computational complexity of any useful steganalytic tools cannot be infinitely great. In terms of practicality, a system may be considered secure, or steganographically strong [9], if it is impossible for an eavesdropper to detect the presence of stego-contents by using any accessible means.
Payload. Unlike watermarking, which needs to embed only a small amount of copyright information, steganography aims at hidden communication and therefore usually requires sufficient embedding capacity. Requirements for substantial data capacity and security are often contradictory. Depending on specific application scenarios, a trade-off must be sought.
Robustness. Although robustness against attacks is not a top priority, as in watermarking, being able to withstand JPEG coding is certainly desirable, since most true-color images are JPEG-compressed before being put online.
Detection of Steganographic Content
Despite the fact that steganographic tools alter only the least-significant image components, they inevitably leave detectable traces in the stego-image, so successful attacks are still possible [4]. The primary goal of attacks against steganography is the detection of the presence of hidden data, although in some cases it may also include extraction and/or destruction of the data. Here, steganalysis refers to detection of the presence of hidden information in a given image. Assume, too, that the cover-image is not available to the steganalyst (stego-only detection). In general, steganalysis involves two major types of techniques: visual analysis and statistical (algorithmic) analysis.
Visual analysis tries to reveal the presence of secret communication through inspection, either with the naked eye or with the assistance of a computer. The computer can, for example, help decompose an image into bit-planes. Any unusual appearance in the display of the LSB-plane would be expected to indicate the existence of secret information. Visual inspection can succeed when secret data is inserted in relatively smooth areas with pixel values near saturation.
Statistical analysis is more powerful since it reveals tiny alterations in an image's statistical behavior caused by steganographic embedding. As there is a range of approaches to embedding, each modifying the image in a different way, unified techniques for detecting hidden information in all types of stego-images are difficult to find. The nominally universal methods developed to detect embedded stego-data are generally less effective than the steganalytic methods aimed at specific types of embedding.
Figure 2 illustrates the effects of a simple LSB steganographic operation. The stego-image in (a) is visually identical to the cover-image. The LSB-plane of the cover-image in (b) contains some noticeable features corresponding to the areas with flat and saturated colors; it is partially replaced with embedded data, scrambled, and spread over the bit-plane, as in (c), with an embedding capacity of 0.52 bits per color channel. The original features are blurred, as they are masked by the embedded data. If the data is embedded sequentially, the result is the map in (d), whereby the message data occupies only the red and a portion of the green planes, with the rest of the LSB-plane padded with zeros. More sophisticated embedding schemes (such as selecting busy areas and padding unoccupied space with a random sequence with the same statistical property as the cover-image) make direct analysis of the LSB-plane more difficult.
| Figure 2 Effects of simple LSB embedding: | |
| (a) | the stego-image is visually indistinguishable from the cover; |
| (b) | the LSB-plane of the cover-image in which some features are visible corresponds to areas with smooth and nearly saturated colors; |
| (c) | the LSB-plane of the stego-image contains embedded data (0.52 bits per color channel) scrambled and evenly spread, so the original features are blurred; |
| (d) | the LSB-plane of the stego-image results from sequential embedding, and only the red and part of the green components are filled with data, while the others are padded with 0s. |
For palette-based images (such as those in GIF format), replacing LSB with the embedded data causes significant color singularities, since neighboring indices in a palette may point to different colors. In order to avoid this problem, some stego tools (such as EzStego) rearrange the palette so consecutive indices represent similar colors. Other techniques simply shuffle the palette according to a key, with the image itself staying intact. These methods can be defeated through analysis of the palette to find unusual ordering, as normal commercial software products arrange the palette based on such attributes as color components and luminance. A peculiar palette itself is sufficient to arouse a steganalyst's suspicion.
With a steganographic tool at hand, the choice of cover-images is at the user's discretion. Images stored in the JPEG format (abundant due to the bandwidth limitation and the widespread use of digital cameras) are therefore likely to be chosen as covers for hidden communication. However, because the JPEG algorithm performs quantization on block DCT coefficients, some known structures are inherent in these images. Slight modification therefore leaves traces incompatible with the JPEG signature, making the stego-image vulnerable to analysis [3].
Some embedding tools cause subtle changes in the set of possible values that may be taken by the pixel gray levels and/or transform coefficients. For example, the QIM technique uses a number of quantizers to embed data into the cover-image so the sample values or certain coefficients show signs of discreteness. A histogram analysis may be used to reveal such a signature (see Figure 3); the left histogram represents the distribution of a particular group of coefficients taken from a cover-image generated by the double transform scheme described earlier. In a stego-image, the discreteness of the histogram on the right is a clear sign of QIM embedding.
| Figure 3 Histogram analysis: (left) histogram of dual-transform coefficients of a cover-image Lena; (right) the signature of QIM embedding. |
Because detecting stego content is performed only with current steganalytic approaches, any system considered secure today may be broken tomorrow using new techniques. Some of the most popular steganalytic methods are outlined in Table 3.
Blind detection of hidden information in apparently innocuous digital media is generally more challenging than data embedding, especially when the embedding rate is low [12], as steganalysts always work in passive mode. Another important consideration in steganalysis is to keep the computational complexity sufficiently low, allowing the screening of thousands (even millions) of suspected images in a reasonably short amount of time. The computation limitation may be less stringent for steganography, since in practical applications the embedding algorithm is executed on only a few images taken from a large database.
Future of Steganography
Conclusion
The battle between steganography and steganalysis represents an important part of 21st century cyber warfare with a profound influence on information security. The two sides of the battle are the attempt to transmit secret messages under cover of innocuous multimedia signals and the effort to detect or prevent such hidden communication.
Various steganographic tools have been developed, many available online. In a sense, some simple methods are already defeated due to the relentless endeavor of steganalysts. Meanwhile, countermeasures against steganalysis are also emerging [11]. Tools that can withstand, to some degree, both visual and statistical attacks are being introduced. For example, in data embedding, much effort has gone toward preserving the statistical characteristics of the cover media. To combat steganalytic tools based on analyzing the increase of unique colors in an image, new embedding methods may be devised that avoid creation of new colors. Alternatively, modifications leading to detectable artifacts may be compensated for after embedding while ensuring the intended recipient is still able to extract the secret message.
Apart from their law enforcement/intelligence and anti-terrorist significance, steganographic techniques also have peaceful applications, including: in-band captioning; integration of multiple media for convenient and reliable storage, management, and transmission; embedding executables for function control; error correction; and version upgrading. Computer specialists, signal-processing researchers, and information security professionals should expect to devote much more attention to the challenging area of information hiding and detection.
References
- Berghel, H. and O'Gorman, L. Protecting ownership rights through digital watermarks. IEEE Comput. 29, 7 (July 1996), 101–103.
- Chen, B. and Wornell, G. Quantization index modulation: A class of provably good methods for watermarking and information embedding. IEEE Transact. Info. Theory 47, 4 (May 2001), 1423–1443.
- Fridrich, J. and Goljan, M. Practical steganalysis of digital images: State of the art. In Proceedings of SPIE, Security and Watermarking Multimedia Contents IV (San Jose, CA, Jan. 21–24). International Society for Optical Engineering, 2002, 1–13.
- Johnson, N. and Jajodia, S. Exploring steganography: Seeing the unseen. IEEE Comput. 31, 2 (Feb. 1998), 26–34.
- Katzenbeisser, S. and Petitcolas, F. Defining security in steganographic systems. In Proceedings of SPIE, Security and Watermarking of Multimedia Contents IV (San Jose, CA, Jan 21–24). International Society for Optical Engineering, 2002, 50–56.
- Kovacich, G. and Jones, A. What infosec professionals should know about information warfare tactics by terrorists (Parts 1 and 2). Comput. & Sec. 21, 1 (Jan. 2002), 35–41; 21, 2 (Mar. 2002), 113–119.
- Marvel, L., Boncelet, C., Jr., and Retter, C. Spread-spectrum image steganography. IEEE Transact. Image Process. 8, 8 (Aug. 1999), 1075–1083.
- Memon, N. and Wong, P. Protecting digital media content. Commun. ACM 41, 7 (July 1998), 34–43.
- Moskowitz, I., Longdon, G., and Chang, L. A new paradigm hidden in steganography. In Proceedings of the 2000 Workshop on New Security Paradigms (Ballycotton, County Cork, Ireland, Sept. 18–21). ACM Press, New York, 2000, 41–50.
- Provos, N. and Honeyman, P. Detecting steganographic content on the Internet. In Proceedings of Network and Distributed System Security Symposium (San Diego, Feb. 6–8). Internet Society, Reston, VA, 2002.
- Westfeld, A. F5-Steganographic algorithm: High capacity despite better steganalysis. In Lecture Notes in Computer Science 2137. Springer-Verlag, Berlin, 2001, 289–302.
- Westfeld, A. Detecting low embedding rates. In Lecture Notes in Computer Science 2137. Springer-Verlag, Berlin, 2003, 324–339.
Footnotes
This research is supported by research grant No. CityU 1234/03E from the government of Hong Kong.
Huaiqing Wang (iswang@is.cityu.edu.hk) is an associate professor in the Department of Information Systems at the City University of Hong Kong.
Shuozhong Wang (shuowang@staff.shu.edu.cn) is a professor in the School of Communication and Information Engineering at Shanghai University, China.
2007年3月19日 星期一
[紀錄]新的研究用blog
本來想跟資訊隱藏課共用ㄧ個blog就好了
不過我想一想
還是把這兩個分開放
因為有些東西跟課堂好像沒啥關係
(例如說筆記,papper,程式之類的...)
都放在那好像有點奇怪
雖然還是不太習慣記錄自己做了什麼
不過之前搬家的時候
翻到以前和鳥泰,airyee,奔騰一組專研的時候
老師要我們做的進度紀錄表
看到那時候怎麼想到畫六邊形
怎麼框那個區域
又怎麼針對每個區域去比對圖片
再換進去的過程
其實我早就忘記那時候我怎麼做出來
只記得有六邊形這東西
現在要重新做一個出來
也應該要想很久
還好那時候有認真做進度表
有努力的畫圖表達想法
我才可以很快的想起來那時候怎麼做的
也許老師說的對
現在紀錄過程中的點點滴滴
以後寫論文的時候
也比較好寫
不用到時候才再想那時候是怎麼做的
而且
我這麼容易丟三落四
如果寫在本子上
搞不好會不見...
或是忘記放在哪...
我又那麼健忘
一定到時候會忘記那個過程的啦
像我上禮拜忘記帶隨身碟回桃園
真是有夠不方便的!!
--
雖然我不知道我可以持續記錄多久就是了..


