Steganography conceals secret data by embedding it within seemingly harmless carriers, while steganalysis detects the presence of hidden information within media. Numerous steganography tools exist, many of which are Windows executables. SteganographX Plus is a freely available, popular, and frequently used tool cited by different authors. This paper investigates the possibility of identifying a signature in the SteganographX Plus. Further, we describe the hiding process employed by the SteganographX Plus. According to the hiding process, we propose an approach, feature-augmented password cracking (FAPC), to reduce brute-force execution time by exploiting features inherent in the hiding process, such as signature, PRNG, etc. The proposed approach significantly reduces password search execution time compared to a general brute-force attack.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Signature-Based Steganalysis and Feature-Augmented Password Cracking for Steganography Tool SteganographX Plus

  • Sayak Bhowal,
  • Bitanu Biswas,
  • Madhusudan Paul

摘要

Steganography conceals secret data by embedding it within seemingly harmless carriers, while steganalysis detects the presence of hidden information within media. Numerous steganography tools exist, many of which are Windows executables. SteganographX Plus is a freely available, popular, and frequently used tool cited by different authors. This paper investigates the possibility of identifying a signature in the SteganographX Plus. Further, we describe the hiding process employed by the SteganographX Plus. According to the hiding process, we propose an approach, feature-augmented password cracking (FAPC), to reduce brute-force execution time by exploiting features inherent in the hiding process, such as signature, PRNG, etc. The proposed approach significantly reduces password search execution time compared to a general brute-force attack.