Stego key searching for LSB steganography on JPEG decompressed image  

作　　者：Jiufen LIU Yuguo TIAN Tao HAN Junchao WANG Xiangyang LUO 

机构地区：[1]Zhengzhou Information Science and Technology Institute,Zhengzhou 450001,China [2]State Key Laboratory of Mathematical Engineering and Advanced Computing,Zhengzhou 450001,China [3]State Key Laboratory of Information Security,Institute of Information Engineering,Chinese Academy of Sciences,Beijing 100093,China

出　　处：《Science China(Information Sciences)》2016年第3期56-70,共15页中国科学（信息科学）（英文版）

基　　金：partly supported by National Natural Science Foundation of China(Grant No.61302159);Excellent Youth Foundation of Henan Province of China(Grant No.144100510001);Foundation of Science and Technology on Information Assurance Laboratory(Grant No.KJ-14-108);Doctoral Dissertation Innovation Fund of Zhengzhou Information Science and Technology Institute(Grant No.BSLWCX201309)

摘　　要：At present, steganalysis research focuses on detecting the existence of a hidden message. However, extracting the hidden information, i.e., an extracting attack, is crucial in obtaining effective evidence in computer forensics. Due to the difficulty of an extracting attack, research in this field is limited. In steganography with a stego key, an extracting attack is equivalent to recovering the stego key. In this paper we study a method for recovering the stego key in least significant bit （LSB） steganography with a decompressed JPEG image as the cover image. Firstly, the recovery of the stego key is translated into a cryptanalysis problem for a sequential cipher. The method for recovering the stego key is based on estimating the modification positions. The minimum size of the data used to recover the stego key successfully is discussed. Secondly, when a decompressed JPEG image is used as the cover image, the probability of recovering the cover pixels using recompression is discussed. Recompression is used to compute the error of the estimated sequence. Finally, an algorithm to recover the stego key in LSB steganography with a decompressed JPEG image as the cover image is proposed. The experimental results for the steganographic software, Hide and Seek 4.1 and its variant, which is a typical representative of LSB steganography, show that the proposed method can successfully recover the stego key in LSB replacement and LSB matching, i.e., the extracting attack is successful, and it outperforms three previous methods in terms of computational complexity.At present, steganalysis research focuses on detecting the existence of a hidden message. However, extracting the hidden information, i.e., an extracting attack, is crucial in obtaining effective evidence in computer forensics. Due to the difficulty of an extracting attack, research in this field is limited. In steganography with a stego key, an extracting attack is equivalent to recovering the stego key. In this paper we study a method for recovering the stego key in least significant bit （LSB） steganography with a decompressed JPEG image as the cover image. Firstly, the recovery of the stego key is translated into a cryptanalysis problem for a sequential cipher. The method for recovering the stego key is based on estimating the modification positions. The minimum size of the data used to recover the stego key successfully is discussed. Secondly, when a decompressed JPEG image is used as the cover image, the probability of recovering the cover pixels using recompression is discussed. Recompression is used to compute the error of the estimated sequence. Finally, an algorithm to recover the stego key in LSB steganography with a decompressed JPEG image as the cover image is proposed. The experimental results for the steganographic software, Hide and Seek 4.1 and its variant, which is a typical representative of LSB steganography, show that the proposed method can successfully recover the stego key in LSB replacement and LSB matching, i.e., the extracting attack is successful, and it outperforms three previous methods in terms of computational complexity.

关 键 词：STEGANALYSIS extracting attack LSB steganography decompressed JPEG image recompression stego key 

分 类 号：TN919.81[电子电信—通信与信息系统]