Steganalysis
(also steganographic analysis)
Steganalysis definition
Steganalysis is a procedure that focuses on detecting hidden information or data within various types of digital media. The main aim is to use the extracted information or destroy it. Steganalysis employs different techniques, such as file format analysis, content analysis, statistical analysis, and steganography-specific methods. Steganalysis benefits cybersecurity by allowing it to uncover covert communication, steganographic malware and can assist in forensic information investigations.
See also: SQL-injection, Threat Protection
Common Steganalysis tools and methods
Format analysis: In format analysis, the main focus is on specific files’ metadata and internal structure. That way, suspicious elements can indicate hidden information. These elements can be file headers and footers. Even the signatures can disclose indications of steganographic techniques.
Statistical analysis: In this method, steganalysis algorithms dive into the statistical properties of a file to detect anomalies or certain deviations that can indicate the hidden data. Elements like noise characteristics, color distributions, and frequency domains are examined.
Steganography-oriented techniques: In these specific techniques, devoted software tools and steganography techniques are employed. The main goal is to exploit familiar vulnerabilities or characteristics of steganographic algorithms for easier information extraction.
Content analysis: Here, the visual and auditory content of media files is explored to find discrepancies that could indicate a piece of hidden information. The expected media content is often compared with the actual content to identify the differences.