An Overview of Steganography for the Computer Forensics Examiner

Gray C. Kessler,
"An Overview of Steganography for the Computer Forensics Examiner,"
Forensic Science Communications, Volume 6, Number 3



Abstract

Steganography is the art of covered or hidden writing. The purpose of steganography is covert communication - to hide the existence of a message from a third party. This paper is intended as a high-level technical introduction to steganography for those unfamiliar with the field. It is directed at forensic computer examiners who need a practical understanding of steganography without delving into the mathematics, although references are provided to some of the ongoing research for the person who needs or wants additional detail. Although this paper provides a historical context for steganography, the emphasis is on digital applications, focusing on hiding information in online image or audio files. Examples of software tools that employ steganography to hide data inside of other files as well as software to detect such hidden files will also be presented.

這篇文章是專門為不熟悉 steganography 這個領域的人寫的, 想要一探 steganography 領域, 又不想被複雜的數學給牽絆住的人, 很適合從這篇起步。

Contents

1. Introduction
2. Null Ciphers (延伸閱讀)
3. Digital Image and Audio
4. Digital Carrier Methods
5. Steganography Examples
　a. Gif-It-Up
　b. JP Hide-&-Seek (JPHS) (延伸閱讀)
　c. S-Tools (延伸閱讀)
6. Detecting Steganography
7. Steganography Detection Tools
8. Summary and Conclusions
　
　[Original Link]