DVD CRACKS: Vulnerability to DVD data.

1
DVD CRACKS Vulnerability to DVD data.
Members Darshan Patil
Tarun Gursahani CIS 600 INTERNET
SECURITY PRINCIPLES FALL 2001 - Interim
Project Status Report
2
Project Team

• Darshan Patil ltdapatil_at_syr.edugt
• Tarun Gursahani lttggursah_at_syr.edugt
• Responsibilities (shared)
• Research
• Writing
• Project
• Presentation

3
Project Description

• Recently, Digital Versatile Disks have been
  hacked. There exists two programs to recover
  secure data, from the disks. Investigate the
  history, nature, and the methods used to exploit
  this vulnerability.
• Are other data sources at risk?
• What legal ramifications are there to exploiting
  data on DVDs or even using the DeCSS programs.
• What can be done to re-secure the data on DVDs?
• What are region codes? Why are these important?
  
• Can watermarks or steganographic means be a way
  to re-secure DVD data?
• What are the controlling organizations for the
  security aspects to DVD data? Provide your
  assessment (with as much support as possible) as
  to the direction DVD data security will take in
  the next two years.

4
Regional Coding

• Region 1 - The U.S., U.S. territories and Canada
• Region 2 - Europe, Japan, the Middle East, Egypt,
  South Africa, Greenland
• Region 3 - Taiwan, Korea, the Philippines,
  Indonesia, Hong Kong 
• Region 4 - Mexico, South America, Central
  America, Australia, New Zealand, Pacific Islands,
  Caribbean
• Region 5 - Russia (okay, former Russia), Eastern
  Europe, India, most of Africa, North Korea,
  Mongolia
• Region 6 China
• Region 7 - Reserved
• Region 8 - Special international venues
  (airplanes, cruise ships, etc.)

5
Terminology

• What is CSS
• Content Scrambling System
• What is DivX-)
• A simple hack of Microsoft's MPEG-4 video
  codec and MP3 audio

6
DeCSS Software
Select the DVD from the F/
Select Folder to copy DVD data into
Crack in Progress!!
7
Legal Issues

• The supporters of DeCSS point out that it was
  only developed to allow DVD movies to be played
  on the Linux operating system, which had been
  excluded from CSS licensing because of its
  open-source nature. This is specifically allowed
  by DMCA and WIPO laws.
• However, the DeCSS.exe program posted on the
  Internet is a Windows application that decrypts
  movie files. The lack of differentiation between
  the DeCSS process in Linux and the DeCSS.exe
  Windows application is hurting the cause of DeCSS
  backers, since DeCSS.exe can be used in the
  process of copying and illegally distributing
  movies from DVD.

8
Merchandise
9
Securing DVD

• Watermarking
• Steganography

10
Watermarking
11
Web References
http//www.pctechguide.com/ Website Relating to
information about Regional Coding
in DVDs. http//www.dvdcca.org/data/css/
Official Website of the DVD Copy Control
Association http//www.slashdot.org/ Information
about use of Digital Watermarking and
Steganography in DVD data security. http//www2.cs
.cmu.edu/dst/DeCSS/Gallery/index.html Website
consisting of all latest DVD Crack Codes(DeCSS)
http//www.dvddemystified.com/dvdfaq.html DVD
FAQ http//eon.law.harvard.edu/openlaw/DVD/resourc
es/crypto.gq.nu.html Analysis of DVD CSS.
12
Progress

• Downloaded and tried to study CSS cracking code.
• Studied Regional Coding in DVDs ,also read
  about the latest development Regional Coding
  Enchancement (RCE).
• Read latest articles and technical papers on
  current DVD data security laws. (Currently
  following the lawsuit between Motion Picture
  Association of America (MPAA) and 2600
  Enterprises regarding of publishing DeCSS code
  by the latter).
• Read a paper A Tool For Robust Audio
  Information Hiding Audio Hashing Algorithm -M.
  Kivanc Mihcak, Ramarathnam Venkatesan about how
  Watermarking would
• help resecure DVD data.

13
Bottlenecks

• Lack of access to a DVD drive
• Not enough knowledge about cryptography
• Time

14
Proposed Outline

• Executive Summary
• Introduction
• Body
• How is DVD data cracked?
• What are the legal ramifications of
• using crack codes?
• What is meant by Regional
• Coding?
• What are the security aspects and
• ways of re-securing DVD data?

15
Proposed Outline (contd.)

• CONCLUSION
• Predicament of law enforcers and MPAA.
• (Motion Picture Association of America )
• Views and suggestions on future of DVD
• data security.