Hi Chad.
I know that Jack is working on this.
In the meantime, I have a couple of articles that I can point you to and, if
nothing else, the bibliographies might be helpful....
"An Overview of Steganography for the Computer Forensics Examiner" (FBI Forensic
Science Communications, July 2004),
http://www.garykessler.net/library/fsc_stego.html
"Steganography: Implications for the Prosecutor and Computer Forensics Examiner"
(National District Attorneys Association Newsletter, June 2004),
http://www.garykessler.net/library/ndaa_stego.html
More later, I'm sure!
/kess
Quoting "Chad W. Davis" <chad.davis@backbonesecurity.com>:
Hello all,
Recently there was discussion on this list about best practices for
steganography detection and extraction. I have not heard anything else
since. As far as I know, there currently are no such documents
available
either online or off. (Someone please correct me if I am wrong.) Is
there
any work being performed to create such a document? If not, I would be
interested in hearing from those of you who do forensic analysis and
what
needs are not addressed in the areas of steganography detection and
extraction.
Thank you,
Chad W. Davis
-----------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com
=========================================================================
Gary C. Kessler gary.kessler@champlain.edu
Associate Professor Project Director
Program Dir., Computer & Digital Forensics Information Security
Program Dir., Computer Networking Vt. Information Technology Ctr.
Champlain College Office: +1 802-865-6460
West Hall, Room 12 Fax: +1 802-865-6447
163 South Willard Street Cell: +1 802-238-8913
Burlington, VT 05401
http://digitalforensics.champlain.edu kumquat@sover.net
http://networking.champlain.edu http://www.garykessler.net
PGP Public Key: http://www.garykessler.net/kumquat_pubkey.html
-----------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com
