On covert collaboration

ABSTRACT

In the conventional steganographic framework, a covert message is hidden within a larger, seemingly innocent message. We argue that this framework must be extended in order to adequately model the means and goals of modern collaborative systems. Whereas messages are static objects with a single creator, collaborative systems are dynamically changed by multiple entities according to rules and patterns specific to the given system.

The primary contribution of this paper is to frame the general question: When can one steganographically embed collaborative system A into collaborative system B? As a case study, we develop a system for embedding a simple wiki into the Flickr photo sharing service. We develop techniques for steganographically embedding a collaborative system whose update rules are quite different than those of the host service.

REFERENCES

• 1: Nicholas J. Hopper , John Langford , Luis von Ahn, Provably Secure Steganography, Proceedings of the 22nd Annual International Cryptology Conference on Advances in Cryptology, p.77-92, August 18-22, 2002
• 2: L. Reyzin and S. Russell, "More efficient provably secure steganography," in Cryptology ePrint Archive, Report 2003., 2003.
• 3: Aggelos Kiayias, Yona Raekow, and Alexander Russell, "Efficient steganography with provable security,".
• 4: K. Sullivan, K. Solanki, B. S. Manjunath, U. Madhow, and S. Chandrasekaran, "Determining achievable rates for secure zero divergence steganography," in IEEE International Conference on Image Processing 2006(ICIP06), Oct 2006.
• 5: K. Solanki, K. Sullivan, U. Madhow, B. S. Manjunath, and S. Chandrasekaran, "Provably secure steganography: Achieving zero k-l divergence using statistical restoration," in IEEE International Conference on Image Processing 2006 (ICIP06), Oct 2006.
• 6: K. Solanki, K. Sullivan, U. Madhow, B. S. Manjunath, and S. Chandrasekaran, "Statistical restoration for robust and secure steganography," in IEEE International Conference on Image Processing, Sep 2005.
• 7: Mendel Rosenblum , John K. Ousterhout, The design and implementation of a log-structured file system, Proceedings of the thirteenth ACM symposium on Operating systems principles, p.1-15, October 13-16, 1991, Pacific Grove, California, United States
• 8: Elke Franz, Steganography Preserving Statistical Properties, Revised Papers from the 5th International Workshop on Information Hiding, p.278-294, October 07-09, 2002
• 9: Rajarathnam Chandramouli, "A mathematical framework for active steganalysis.," Multimedia Syst., vol. 9, no. 3, pp. 303--311, 2003.
• 10: Neil F. Johnson , Sushil Jajodia, Steganalysis of Images Created Using Current Steganography Software, Proceedings of the Second International Workshop on Information Hiding, p.273-289, April 14-17, 1998
• 11: Andrew D. Ker, "Improved detection of lsb steganography in grayscale images.," in Information Hiding, 2004, pp. 97--115.
• 12: Jessica J. Fridrich , Miroslav Goljan , Dorin Hogea, Steganalysis of JPEG Images: Breaking the F5 Algorithm, Revised Papers from the 5th International Workshop on Information Hiding, p.310-323, October 07-09, 2002
• 13: Ross J. Anderson , Roger M. Needham , Adi Shamir, The Steganographic File System, Proceedings of the Second International Workshop on Information Hiding, p.73-82, April 14-17, 1998
• 14: Andrew D. McDonald , Markus G. Kuhn, StegFS: A Steganographic File System for Linux, Proceedings of the Third International Workshop on Information Hiding, p.462-477, September 29-October 01, 1999
• 15: Hwee Hwa Pang, Kian-Lee Tan, and Xuan Zhou, "Stegfs: A steganographic file system," icde, vol. 00, pp. 657, 2003.
• 16: Steven Hand , Timothy Roscoe, Mnemosyne: Peer-to-Peer Steganographic Storage, Revised Papers from the First International Workshop on Peer-to-Peer Systems, p.130-140, March 07-08, 2002
• 17: Arati Baliga , Joe Kilian , Liviu Iftode, A web based covert file system, Proceedings of the 11th USENIX workshop on Hot topics in operating systems, p.1-6, May 07-09, 2007, San Diego, CA
• 18: Steven J. Murdoch and Stephen Lewis, "Embedding covert channels into tcp/ip.," in Information Hiding, 2005, pp. 247--261.
• 19: John Giffin, Rachel Greenstadt, Peter Litwack, and Richard Tibbetts, "Covert messaging through tcp timestamps.," in Privacy Enhancing Technologies, 2002, pp. 194--208.
• 20: Serdar Cabuk , Carla E. Brodley , Clay Shields, IP covert timing channels: design and detection, Proceedings of the 11th ACM conference on Computer and communications security, October 25-29, 2004, Washington DC, USA [doi>10.1145/1030083.1030108]
• 21: K. Ahsan and D. Kundur, "Practical data hiding in tcp/ip," in Proc. ACM Workshop on Multimedia Security, 2002.
• 22: Darko Kirovski , Henrique S. Malvar, Robust Covert Communication over a Public Audio Channel Using Spread Spectrum, Proceedings of the 4th International Workshop on Information Hiding, p.354-368, April 25-27, 2001
• 23: J. J Chae and B. S. Manjunath, "Data hiding in video," in International Conference on Image Processing, 1999, pp.311--315.
• 24: Min Wu and Bede Liu, "Data hiding in image and video .i. fundamental issues and solutions.," IEEE Transactions on Image Processing, vol. 12, no. 6, pp.685--695, 2003.
• 25: Andreas Westfeld , Gritta Wolf, Steganography in a Video Conferencing System, Proceedings of the Second International Workshop on Information Hiding, p.32-47, April 14-17, 1998
• 26: Gaurav Shah , Andres Molina , Matt Blaze, Keyboards and covert channels, Proceedings of the 15th conference on USENIX Security Symposium, p.5-5, July 31-August 04, 2006, Vancouver, B.C., Canada
• 27: Dawn Xiaodong Song, David Wagner, and Xuqing Tian, "Timing analysis of keystrokes and timing attacks on SSH,".
• 28: Yvo Desmedt, Abuses in Cryptography and How to Fight Them, Proceedings of the 8th Annual International Cryptology Conference on Advances in Cryptology, p.375-389, August 21-25, 1988
• 29: Gina Fisk , Mike Fisk , Christos Papadopoulos , Joshua Neil, Eliminating Steganography in Internet Traffic with Active Wardens, Revised Papers from the 5th International Workshop on Information Hiding, p.18-35, October 07-09, 2002
• 30: Randy Browne, "Mode security: An infrastructure for covert channel suppression," sp, vol. 00, pp. 39, 1994.
• 31: Kevin Borders , Atul Prakash, Web tap: detecting covert web traffic, Proceedings of the 11th ACM conference on Computer and communications security, October 25-29, 2004, Washington DC, USA [doi>10.1145/1030083.1030100]
• 32: M. Kharrazi, H. T. Sencar, N. Memon, Performance Study of Common Image Steganography and Steganalysis Techniques, Journal of Electronic Imaging, Volume 15, Issue 4, October-December 2006.
• 33: David L. Chaum, Untraceable electronic mail, return addresses, and digital pseudonyms, Communications of the ACM, v.24 n.2, p.84-90, Feb. 1981 [doi>10.1145/358549.358563]
• 34: Markus Jakobsson , Ari Juels, An optimally robust hybrid mix network, Proceedings of the twentieth annual ACM symposium on Principles of distributed computing, p.284-292, August 2001, Newport, Rhode Island, United States [doi>10.1145/383962.384046]
• 35: David M. Goldschlag , Michael G. Reed , Paul F. Syverson, Hiding Routing Information, Proceedings of the First International Workshop on Information Hiding, p.137-150, May 30-June 01, 1996
• 36: Paul F. Syverson , David M. Goldschlag , Michael G. Reed, Anonymous Connections and Onion Routing, Proceedings of the 1997 IEEE Symposium on Security and Privacy, p.44, May 04-07, 1997
• 37: Roger Dingledine , Nick Mathewson , Paul Syverson, Tor: the second-generation onion router, Proceedings of the 13th conference on USENIX Security Symposium, p.21-21, August 09-13, 2004, San Diego, CA
• 38: Lasse Overlier , Paul Syverson, Locating Hidden Servers, Proceedings of the 2006 IEEE Symposium on Security and Privacy, p.100-114, May 21-24, 2006 [doi>10.1109/SP.2006.24]
• 39: R. Ostrovsky, Efficient computation on oblivious RAMs, Proceedings of the twenty-second annual ACM symposium on Theory of computing, p.514-523, May 13-17, 1990, Baltimore, Maryland, United States [doi>10.1145/100216.100289]

INDEX TERMS

Primary Classification:
  H. Information Systems
  H.4 INFORMATION SYSTEMS APPLICATIONS
      H.4.3 Communications Applications

General Terms:
Security

Keywords:
collaborative systems, steganography