The 14,000 file profiles that are contained within the Steganography
Application Fingerprint Database (SAFDB) are not for files that have been
found to contain steganographic information. Instead, these 14,000 file
profiles are associated with the applications that actually hide the data.
The SAFDB is available for free to law enforcement and the intelligence
community and for license by corporate entities.
We have also developed ways to detect and extract steganography from carrier
files, and I invite you to contact us for additional information.
I hope this information helps.
Chad W. Davis
Computer Security Engineer
Backbone Security.Com
320 Adams Street, Suite 105
Fairmont, WV 26554
Tel: 304-333-2028
Fax: 304-366-9161
http://www.backbonesecurity.com
Steganography Analysis and Research Center
http://www.sarc-wv.com
-----Original Message-----
From: Raymond C. Parks [mailto:rcparks@comcast.net]
Sent: Thursday, March 31, 2005 10:58 PM
To: Chad W. Davis
Cc: forensics@securityfocus.com
Subject: Re: New Steganography Hash Sets Available!
Chad W. Davis wrote:
The fundamental goal of the Steganography Analysis and Research Center
(SARC) is to collect steganography, watermarking, and other data-hiding
applications from various sources and incorporate file profiles computed
from them into the Steganography Application Fingerprint Database (SAFDB).
To date, the SAFDB contains 14,000 file profiles associated with 200
data-hiding applications.
How, precisely, does one use these 14,000 file profiles? Are these
hashes of 14,000 files that have been found to contain steganographic
information?
Ray Parks
-----------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com
-----------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com
