Malware Lab, Cyber Security Research Center, Ben-Gurion University of the Negev, Israel; Department of Software and Information Systems Engineering, Ben-Gurion University of the Negev, Israel.
Malware Lab, Cyber Security Research Center, Ben-Gurion University of the Negev, Israel.
Neural Netw. 2020 Nov;131:64-77. doi: 10.1016/j.neunet.2020.07.022. Epub 2020 Jul 29.
Steganography is the art of embedding a confidential message within a host message. Modern steganography is focused on widely used multimedia file formats, such as images, video files, and Internet protocols. Recently, cyber attackers have begun to include steganography (for communication purposes) in their arsenal of tools for evading detection. Steganalysis is the counter-steganography domain which aims at detecting the existence of steganography within a host file. The presence of steganography in files raises suspicion regarding the file itself, as well as its origin and receiver, and might be an indication of a sophisticated attack. The JPEG file format is one of the most popular image file formats and thus is an attractive and commonly used carrier for steganography embedding. State-of-the-art JPEG steganalysis methods, which are mainly based on neural networks, are limited in their ability to detect sophisticated steganography use cases. In this paper, we propose ASSAF, a novel deep neural network architecture composed of a convolutional denoising autoencoder and a Siamese neural network, specially designed to detect steganography in JPEG images. We focus on detecting the J-UNIWARD method, which is one of the most sophisticated adaptive steganography methods used today. We evaluated our novel architecture using the BOSSBase dataset, which contains 10,000 JPEG images, in eight different use cases which combine different JPEG's quality factors and embedding rates (bpnzAC). Our results show that ASSAF can detect stenography with high accuracy rates, outperforming, in all eight use cases, the state-of-the-art steganalysis methods by 6% to 40%.
隐写术是将机密信息嵌入宿主消息的艺术。现代隐写术专注于广泛使用的多媒体文件格式,如图像、视频文件和互联网协议。最近,网络攻击者开始在其逃避检测的工具集中包含隐写术(用于通信目的)。隐写分析是反隐写术领域,旨在检测宿主文件中隐写术的存在。文件中存在隐写术会引起对文件本身及其来源和接收者的怀疑,并且可能表明存在复杂的攻击。JPEG 文件格式是最流行的图像文件格式之一,因此是隐写术嵌入的有吸引力且常用的载体。最先进的 JPEG 隐写分析方法主要基于神经网络,其检测复杂隐写术用例的能力有限。在本文中,我们提出了 ASSAF,这是一种由卷积去噪自动编码器和孪生神经网络组成的新型深度神经网络架构,专门用于检测 JPEG 图像中的隐写术。我们专注于检测当今使用的最复杂的自适应隐写术方法之一 J-UNIWARD。我们使用包含 10000 张 JPEG 图像的 BOSSBase 数据集在八个不同的使用案例中评估我们的新架构,这些案例结合了不同的 JPEG 质量因素和嵌入率(bpnzAC)。我们的结果表明,ASSAF 可以以高精度检测到隐写术,在所有八个用例中,比最先进的隐写分析方法高出 6%到 40%。