Using Steganography
A primary purpose of steganography is to hide sensitive information from censors, abusive
regimes, spies, and thieves. Information that appears to be mundane, innocuous, and perhaps
even a little bit boring will attract little attention. Information that is encrypted, using PGP for
example, may not be able to be decrypted and read by an adversary, but the use of encryption
may cause an adversary to believe that the message contains sensitive or illicit information,
whether it does or not. In some places the use of strong encryption may be restricted or
prohibited. Steganography allows encrypted information to be hidden from prying eyes.
When using steganography to transmit information there should be a plausible reason for sending
a file to someone in the first place. Just sending attached photos or files without any associated
comments or context can appear suspicious. Instead of sending a file to someone directly, an
innocuous photo might be posted to a web-page or on-line forum. Anyone that wanted to do so
could copy the photo, but only someone with OpenPuff and knowledge of the correct passwords
could recover any hidden information that the photo might contain.
It should be noted that because of the way some social media sites, like Facebook, process posted
photos, information hidden using OpenPuff, and other steganography programs, may be
corrupted or destroyed in photos uploaded to these sites. If using a social media site to exchange
information using steganography it is important to conduct tests to ensure that data integrity is
maintain in uploaded files.
Steganography works well to hide small amounts of sensitive data in otherwise innocuous
information. The greatest limitation of steganography is that carrier files must be significantly
larger than the data being hidden. You can’t hide the text of a large book in a small image file.
Large amounts of data are best hidden in audio (wav) or stream files (Mp4), and OpenPuff does
this quite well. With OpenPuff you can also split large amount of data over multiple carrier files.
Michael Chesbro 4
As with all security tools, it is important to practice using OpenPuff to become proficient, and to
be able to take full advantage of the capabilities of the software. OpenPuff is an important tool
for security researchers and for anyone who needs to share sensitive information.
Conclusions
OpenPuff is certainly not the only steganography tool available. There are several other
steganography tools available (some of which are quite good), but in the opinion of the author
OpenPuff is the best steganography tool currently available. OpenPuff’s ability to encrypt data,
conceal that data in several different types of carrier files, split data over multiple carrier files,
and provide for the hiding of decoy data to help guard against coercion – forcing someone to
disclose passwords used to protect hidden information – makes OpenPuff must have security
software.
Using SteganographyA primary purpose of steganography is to hide sensitive information from censors, abusiveregimes, spies, and thieves. Information that appears to be mundane, innocuous, and perhapseven a little bit boring will attract little attention. Information that is encrypted, using PGP forexample, may not be able to be decrypted and read by an adversary, but the use of encryptionmay cause an adversary to believe that the message contains sensitive or illicit information,whether it does or not. In some places the use of strong encryption may be restricted orprohibited. Steganography allows encrypted information to be hidden from prying eyes.When using steganography to transmit information there should be a plausible reason for sendinga file to someone in the first place. Just sending attached photos or files without any associatedcomments or context can appear suspicious. Instead of sending a file to someone directly, aninnocuous photo might be posted to a web-page or on-line forum. Anyone that wanted to do socould copy the photo, but only someone with OpenPuff and knowledge of the correct passwordscould recover any hidden information that the photo might contain.It should be noted that because of the way some social media sites, like Facebook, process postedphotos, information hidden using OpenPuff, and other steganography programs, may becorrupted or destroyed in photos uploaded to these sites. If using a social media site to exchangeinformation using steganography it is important to conduct tests to ensure that data integrity ismaintain in uploaded files.Steganography works well to hide small amounts of sensitive data in otherwise innocuousinformation. The greatest limitation of steganography is that carrier files must be significantlylarger than the data being hidden. You can’t hide the text of a large book in a small image file.Large amounts of data are best hidden in audio (wav) or stream files (Mp4), and OpenPuff doesthis quite well. With OpenPuff you can also split large amount of data over multiple carrier files. Michael Chesbro 4As with all security tools, it is important to practice using OpenPuff to become proficient, and tobe able to take full advantage of the capabilities of the software. OpenPuff is an important toolfor security researchers and for anyone who needs to share sensitive information.ConclusionsOpenPuff is certainly not the only steganography tool available. There are several othersteganography tools available (some of which are quite good), but in the opinion of the authorOpenPuff is the best steganography tool currently available. OpenPuff’s ability to encrypt data,conceal that data in several different types of carrier files, split data over multiple carrier files,and provide for the hiding of decoy data to help guard against coercion – forcing someone todisclose passwords used to protect hidden information – makes OpenPuff must have securitysoftware.
การแปล กรุณารอสักครู่..
