Steganography

1
Steganography File Binding

• Jason P. Russell

2
Steganography

• Steganography is the art and science of writing
  hidden messages in such a way that no one apart
  from the intended recipient knows of the
  existence of the message this is in contrast to
  cryptography, where the existence of the message
  itself is not disguised, but the content is
  obscured.

3
Steganography

• During a quick Internet search, I found 146
  applications which are designed to hide files
  inside of other files.
• Files can be hidden in just about any kind of
  file (photos, videos, mp3s, documents,
  executables, etc.).
• These programs can hide several files inside of a
  single file without altering the size or
  attributes of the original file, basically making
  the process undetectable without highly
  specialized software.

4
Steganography Demonstration
5
File Binding

• Binding files allows you to take one file, such
  as a Microsoft Word document and combine it with
  a Microsoft Excel spreadsheet.
• Changing the file extension allows you to view
  the covert content of the bound file.
• File binding is used to hide the data of one
  format in the format of another file.

6
File Binding Demonstration
7
What can you do to prevent this?

• Be on the lookout for unusual applications
  installed on your computers
• If you notice something unusual, notify the
  network security department so they can take the
  appropriate action
• There is an application from WetStone called
  Stego Suite that attempts to find files that
  are hidden using steganography

8
Any Questions?