INFOSEC Technologies, LLC
Covert Channels


INFOSEC Technologies, LLC has initiated a funded research project on Covert Channel detection mechanisms and steganographic system identification via unique signatures. There are many covert channels in networks, and we will investigate these as correlate with our ( and clients) interests in steganographic techniques.

We thank Russ Rogers and Matthew G. Devost,"Hacking a Terror Network", Syngress, 2005 for access to their resources and Dr. Neil F Johnson, a world class expert on steganography, www.jjtc.com for his seminal work on steganography and description of vendors /authors.

Jim Wingate, VP for West Virginial Operations for Backbone Security provides and insightful whitepaper on physical locations for clandestin exchange of intelligence information in The Perfect Dead Drop The Use of Cyberspace for Covert Communications.

CREATION

The following are brief descriptions of various freeware and shareware covert channels tools included in the Steganography and Watermarking Table.

WINDOWS

  • Blindside (Freeware) - Uses BMP carrier files and includes encryption.
  • BMP Secrets (Freeware) - Uses BMP carrier files and includes encryption.
  • Cameleon (Freeware) - French language tool that uses GIF carrier files and includes encryption.
  • Camera/Shy v0.2.23.1 (Freeware) - Scans for and delivers decrypted content from the Internet.
  • Camouflage (Freeware) - Can hide information in any digital file type by inserting it after the end of file marker. Information hidden this way will not affect how the carrier looks or behaves, although it will increase file size. Includes password protection.
  • Contraband Hell Edition (Freeware) - Uses BMP carrier files and includes encryption.
  • Courier v1.0a (Freeware) - Uses BMP carrier files.
  • CryptArkan (Shareware) - Uses WAV and BMP carrier files; hidden data can be directly read off an audio CD. Includes encryption.
  • Data Privacy Tools (Freeware) Uses BMP carrier files and includes encryption.
  • Data Stash (Shareware) - Uses BMP and database carrier files and includes password protection.
  • Digital Picture Envelope v1.0 (Freeware) - Uses BMP carrier files.
  • Encrypt Pic (Shareware) - Uses 24-bit BMP carrier files and includes encryption.
  • Gif-it-Up (Freeware) - Uses GIF carrier files and includes encryption.
  • Gifshuffle v2.0 (Freeware) - A command-line tool that uses GIF carrier files and includes encryption.
  • Hermetic Stego (Shareware) - Uses BMP carrier files. The developers claim their stego key makes the payload undetectable.
  • Hide and Seek for Win95 (Shareware) - Uses BMP carrier files and includes encryption and file wiping.
  • Hide4PGP v2.0 (Freeware) - A command-line tool that uses BMP, WAV, and VOC carrier files.
  • Hide In Picture 2.0 (Freeware) - USes BMP carrier files and includes encryption.
  • ImageHide (Freeware) - Uses a variety of image carrier files.
  • In Plain View (Freeware) - Uses BMP carrier files and includes password protection.
  • In The Picture (Shareware) - Uses BMP carrier files and includes encryption.
  • InfoStego (Freeware)- Uses BMP carrier files; includes encryption.
  • Invisible Secrets v4.0 (Shareware) - Uses JPEG, PNG, BMP, HTML and WAV carrier files. Includes encryption, shredder, password manager and self-decrypting archives.
  • JPegX (Freeware) - Uses JPEG carrier files and includes encryption and password protection.
  • JP Hide and Seek (Freeware) - Uses JPEG carrier files and includes encryption.
  • JSteg Shell v2.0 (Freeware) - Uses JPEG carrier files; includes encryption.
  • MP3Stego (Freeware) - Uses MP3 carrier files.
  • PGPn123 (Freeware) - A tool that facilitates using PGP for Eudora, Agent, or Pegasus Mail and also includes a steganography option.
  • PhotoCrypt 1.1 (Freeware) - Uses BMP carrier files.
  • Sam's Big Play Maker (Freeware) - A text generation tool that converts a message into an output that looks like a play.
  • Scramdisk (Freeware) - A disk encryption program that allows the creation and use of virtual encrypted drives.
  • Scytale 32bit (Freeware) - A PGP shell program that uses PCX carrier files.
  • SecurEngine 4.0 (Freeware) - Uses BMP, JPEG, WAV, and txt files as carrier files. Includes encryption, file wiping, a password manager, and self-decrypting archives.
  • Stash-It v1.1 (Freeware) - Uses BMP, GIF, TIFF, PNG or PCX carrier files.
  • Steghide 0.4.6b (Freeware) - Uses BMP, WAV and AU carrier files. Includes encryption.
  • Stego-Lame (Freeware) - Uses various audio formats as carrier files. Written in Windows C source code; must be compiled before use.
  • S-Tools 4 - (Freeware) - Uses BMP, GIF, and WAV carrier files; includes password and encryption options.
  • The Third Eye (Freeware) - Uses BMP, GIF, and PCX carrier files and includes encryption
  • wbStego4.3open (Freeware) - Uses BMP, TXT, HTML/XML, and PDF carrier files for both Windows and Unix. Includes a Wizard interface, encryption, and passphrase support.
  • WeavWav (Freeware) - Uses WAV carrier files.

UNIX/LINUX

  • Blindside (Freeware) - Uses BMP carrier files and includes encryption.
  • Covert TCP (Freeware) - Uses TCP packets as carrier files.
  • Gifshuffle (Freeware) - Uses GIF carrier files and includes encryption.
  • Hide4PGP v2.0 (Freeware) - A command-line tool that uses BMP, WAV, and VOC carrier files.
  • Hydan (Freeware) - Uses executables as carrier files.
  • JP Hide and Seek (Freeware) - Uses JPEG carrier files and includes encryption.
  • JSteg (Freeware) - Uses JPEG carrier files.
  • MandelSteg (Freeware) - Uses GIF carrier files.
  • MP3Stego (Freeware) - Output is an MP3 carrier file.
  • Nicetext (Freeware) - Text generation tool that converts a message into an innocuous message.
  • Outguess v0.2 (Freeware) - Uses JPEG carrier files.
  • PGMStealth (Freeware) - Uses PGM grayscale carrier files.
  • Piilo (Freeware) - Uses PGM grayscale carrier files.
  • Snow (Freeware) - Uses text files as carriers.
  • Stealth (Freeware) - A utility that removes the header information from PGP messages, leaving only the encrypted data which may then be hidden.
  • Steganosaurus (Freeware) - A text-based steganography tool.
  • StegFS (Freeware) - Uses Linux file system for hiding information.
  • Steghide 0.3, Release 1 (Freeware) - Uses BMP, WAV and AU carrier files. Includes encryption.
  • StegParty (Freeware) - Hides information by making changes in text.
  • Stegtunnel (Freeware) - Uses TCP packets as carrier files.
  • Texto (Freeware) - Text generation tool that converts a message into an innocuous message.
  • Visual Cryptography (Freeware) - Hides information in two image files that must be layered to reveal.
  • wbStego4open (Freeware) - Uses BMP/TXT/HTML/PDF carrier files

MACINTOSH

  • FatMacPGP 2.6.3 (Freeware) - A version of MacPGP which includes the ability to remove header information, leaving only the encrypted data which may then be hidden.
  • Mimic Functions (Freeware) - Text generation tool that converts a message into an innocuous message.
  • Paranoid (Freeware) - An encryption tool that also allows the hiding of information in audio files.
  • Stego (Shareware) - Uses Macintosh PICT carrier files.

DOS

  • Data Privacy Tools (Freeware) Uses BMP carrier files and includes encryption.
  • dc-Steganograph (Freeware) - Uses PCX carrier files.
  • Empty Pic (Freeware) - Uses GIF carrier files.
  • FFEncode (Freeware) - Uses TXT carrier files.
  • GZSteg (Freeware) - Uses GZip carrier files.
  • Hide4PGP v2.0 (Freeware) - A command-line tool that uses BMP, WAV, and VOC carrier files.
  • Hide and Seek v5.0 (Freeware) - Uses GIF carrier files.
  • Hide In Picture 2.0 (Freeware) - USes BMP carrier files and includes encryption.
  • HideIT (Freeware) - Uses BMP carrier files.
  • JP Hide and Seek (Freeware) - Uses JPEG carrier files and includes encryption.
  • JSteg (Freeware) - Uses TGA carrier files with a JPEG output.
  • MP3Stego (Freeware) - Output is an MP3 carrier file.
  • Pretty Good Envelope v2.0 (Freeware) - Can hide information in any digital file type by inserting it at the end of the file.
  • Snow (Freeware) - Uses text files as carriers.
  • Stealth (Freeware) - A utility that removes the header information from PGP messages, leaving only the encrypted data which may then be hidden.
  • Steganos v1.4 (Freeware) - Uses BMP, WAV, VOC and ASCII carrier files.
  • StegoWav (Freeware) - Uses WAV carrier files and includes encryption.
  • Texto (Freeware) - Text generation tool that converts a message into an innocuous message.
  • White Noise Storm (Freeware) - Uses PCX carrier files and includes encryption.

DETECTION

The following are brief descriptions of various freeware and shareware detection and analysis tools included in the Steganography and Watermarking Table.

WINDOWS

  • 2Mosaic (Freeware) - A tool that corrupts embedded information in files (e.g., digital watermarks).
  • Gargoyle (Demo) - a tool designed to scan for malware on target systems.
  • GIMP (Freeware) - Software that allows image manipulation tasks such as photo retouching, image composition and authoring.
  • LADS (Freeware) - A tool that allows the listing of all alternate data streams associated with an electronic file.
  • Stegdetect (Freeware) - A steganography detection tool for JPEG images.
  • StirMark (Freeware) - A breaking tool that removes embedded information from files (e.g., digital watermarks).
  • UnZign (Freeware) - A breaking tool that removes embedded information from files (e.g., digital watermarks).

UNIX/LINUX

  • GIMP (Freeware) - Software that allows image manipulation tasks such as photo retouching, image composition and authoring.
  • Stegdetect (Freeware) - A steganography detection tool for JPEG images.
  • StirMark (Freeware) - A breaking tool that removes embedded information from files (e.g., digital watermarks).
  • UnZign (Freeware) - A breaking tool that removes embedded information from files (e.g., digital watermarks).

MACINTOSH

  • GIMP (Freeware) - Software that allows image manipulation tasks such as photo retouching, image composition and authoring.
  • StirMark (Freeware) - A breaking tool that removes embedded information from files (e.g., digital watermarks).

DOS

  • StirMark (Freeware) - A breaking tool that removes embedded information from files (e.g., digital watermarks).
  • UnZign (Freeware) - A breaking tool that removes embedded information from files (e.g., digital watermarks).

Steg and Watermarking Tools

Data Hiding

PDF

Journals

Steganalytic Features for JPEG Compression-Based Perturbed Quantization, G. Gul, A. E. Dirik, I. Avcibas, IEEE Signal Processing Letters, Volume 14, Issue 3, 2007

Detection of Audio Covert Channels using Statistical Footprints of Hidden Messages H. Ozer, B. Sankur, N. Memon, I. Avcibas, Digital Signal Processing, Volume 16, 2006.

Image Steganalysis with Binary Similarity Measures, I. Avcibas, M. Kharrazi, N. Memon, B. Sankur, EURASIP Journal on Applied Signal Processing, Volume 2005, Number 17, 2005.

Data Masking: A New Approach for Steganography?, R. Radhakrishnan, M. Kharrazi, N. Memon, The Journal of VLSI Signal Processing, Volume 41, Number 3, November 2005.

Image Steganography: Concepts and Practice, M. Kharrazi, H. T. Sencar, N. Memon, Lecture Notes Series, Institute for Mathematical Sciences, National University of Singapore, 2004.

A Performance Study of Common Image Steganography and Steganalysis Techniques, M. Kharrazi, H. T. Sencar, N. Memon, Journal of Electronic Imaging, Volume 15, Issue 4, October-December 2006.

Improving Steganalysis by Fusion Techniques: A Case Study with Image Based Steganography, M. Kharrazi, H. T. Sencar, N. Memon, LNCS Transactions on Data Hiding and Multimedia Security I, Volume 4300, 2006.

Books

  • Image Steganalysis. R. Chandramouli, and N. Memon. Optical and Digital Techniques for Information Security, Springer Verlag, December 2003.
  • Franz, E. and Schneidewind, A. 2004. Adaptive steganography based on dithering. In Proceedings of the 2004 Workshop on Multimedia and Security (Magdeburg, Germany, September 20 - 21, 2004). MM&Sec '04. ACM Press, New York, NY, 56-62.
  • Franz, E. and Pfitzmann, A. 2000. Steganography Secure against Cover-Stego-Attacks. In Proceedings of the Third international Workshop on information Hiding (September 29 - October 01, 1999). A. Pfitzmann, Ed. Lecture Notes In Computer Science, vol. 1768. Springer-Verlag, London, 29-46.
  • Westfeld, A. Detecting low embedding rates. In Lecture Notes in Computer Science 2137. Springer-Verlag, Berlin, 2003, 324–339.
  • Westfeld, A. F5-Steganographic algorithm: High capacity despite better steganalysis. In Lecture Notes in Computer Science 2137. Springer-Verlag, Berlin, 2001, 289–302
  • Provos, N. and Honeyman, P. Detecting steganographic content on the Internet. In Proceedings of Network and Distributed System Security Symposium (San Diego, Feb. 6–8). Internet Society, Reston, VA, 2002
  • Andreas Westfeld, F5 —A Steganographic Algorithm High Capacity Despite Better Steganalysis, LNCS 2137, Springer-Verlag, 2001. Vol 2137, pp. 289-302
  • Westfeld A, Pfitzmann A, Attacks on steganographic systems, In Proceedings of 3rd International Workshop on Information Hiding, Lecture Notes on Computer Science 1768, Berlin: Springer-Verlag, pp. 61~75, 2000.
  • A. Westfeld and A. Pfitzmann,"Attacks on Steganographic Systems," Lecture Notes in Computer Science, vol. 1768, Springer-Verlag, Berlin, 2000, pp. 61-75.
  • Jessica Fridrich, Miroslav Goljan, Rui Du, "Detecting LSB Steganography in Color and Gray-Scale Images," IEEE MultiMedia, vol. 08,  no. 4,  pp. 22-28,  Oct-Dec,  2001.

Websites

INFOSEC Technologies, LLC
Contact us at: Sales@INFOSEC-Technologies.com
(c) 2008 Infosec Technologies All Rights Reserved