Steganography detection

摘要

Systems and methods for detecting potential steganography use to hide content in computer files transmitted via electronic communications are provided. An electronic communication associated with a computer file may be identified. The communication and the computer file may be analyzed to determine whether the computer file potentially includes hidden content. To determine whether the computer file potentially includes hidden content, a set of steganographic criteria may be analyzed. If at least a portion of the steganographic criteria are satisfied, then it may be determined that the computer file potentially includes hidden content. If at least a portion of the steganographic criteria are not satisfied, then it may be determined that the computer file does not potentially include hidden content. If the computer file is determined to potentially include hidden content, an individual may be notified of the communication associated with the computer file.

主权项

1. A system comprising:
one or more processors; a data store that stores a set of steganographic criteria; and memory storing computer-executable instructions that, when executed by one of the processors, cause the system to
determine whether to analyze a first computer file for potential use of steganography based, at least in part, on an analysis of an electronic communication associated with the first computer file, andresponsive to determining to analyze the first computer file for potential use of steganography, perform a comparison of the first computer file to a second computer file that at least appears to be a copy of the first computer file based on a file characteristic that the first and second computer files have in common, apply at least one steganographic criterion in the set of steganographic criteria to at least one result of the comparison, and determine whether the first computer file potentially includes hidden content based on whether one or more of the steganographic criteria are satisfied.