两款隐写软件的信息隐藏取证  

Forensics of Hidden Information Processed by Two Steganography Tools

作　　者：李金才[1,2] 易小伟[1] 赵险峰[1] 

机构地区：[1]中国科学院信息安全国家重点实验室,北京100093 [2]中国科学院大学,北京100049

出　　处：《计算机科学》2015年第B10期138-143,共6页Computer Science

基　　金：本文受国家自然科学基金课题（61170281,61303259）,中国科学院战略性先导科技专项课题（XDA06030600）资助.

摘　　要：信息隐藏技术的快速发展，使得互联网的隐写软件易于获取和使用。针对电子密写水印和特洛伊两款互联网常见的隐写软件，从分析两款软件的隐蔽数据通信协议出发，研究了软件的数据通信协议和软件的隐写算法，揭示了对两款软件隐写后媒体的取证方法，包括隐写存在性检测和隐藏信息提取方法。在此基础上，进行了实验验证，取得了较好的取证效果。With the rapid development of steganography, steganographic tools are conveniently acquired and used in the Internet. In this paper, two steganographic tools, called electronic watermarking and Trojan respectively, were analyzed. Firstly, based on analyzing cover data communication protocol of the two software tools, their steganographic algorithms were derived. And then a forensic scheme was proposed for identifying stego-images generated by the two software tools. It includes the existence detection and the hidden data extraction method. Finally, the experimental results show that our method is quite effective.

关 键 词：信息隐藏 隐写软件 隐写行为取证 隐蔽通信 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]