MSPs: Get the facts you need to protect your clients.
The 2017 Webroot Threat Report provides a uniquely insightful global view into the analysis and discoveries made by the Webroot® Threat Intelligence Platform to provide insights on key trends and risks as seen by our users.
Course Of The Month
2 days, 14 hours left to enrollBecome a Premium Member and unlock a new, free course in leading technologies each month.
Solved
How can i hide data (steg) in Adobe Flash?
Posted on 2011-03-09
I am doing research on hiding data in Adobe Flash in SWF files in any way possible, from action scripts, embeds, xml, or active-x. Including detecting these potential embeds..
If you know any tricks or have any insights into this i would be thrilled and will assign full points.
Thanks
If you know any tricks or have any insights into this i would be thrilled and will assign full points.
Thanks
[X]
Welcome to Experts Exchange
Add your voice to the tech community where 5M+ people just like you are talking about what matters.
- Help others & share knowledge
- Earn cash & points
- Learn & ask questions
3
2-
2
7 Comments
Active today
For steganography you need fuzzy data. ie. if data is imprecise it should not matter....
f.e. Color nuances are fuzzy (so you can hide data to some extend in a jpeg), just don;t use a picture multiple times (ie also not publishing am original).
You can define a much higher resolution version in the color spectrum than can actualy be seen. So you can slip in bits which are
humans can distinguish about 64 levels of color shades at most. So having a space of 256 levels gives you room to fix 2 bits per pixel that go indistinguishable. (24bit colourspace)
Structured data is a problem. The only imprecise stuff in a programming language/xml is the naming of constants & variables.
But if you change them in one part you need to change it in a lot of parts in a consistent way, otherwise it could be detectable wit a simple build task...?
but do you get enough free bits with that? At least variable names need te be meaningless rather long names to start with...
At least in a movie you might get more bits as the stream has a lot more bits i.e. you can use less bits per image which would avoid some detection.
f.e. Color nuances are fuzzy (so you can hide data to some extend in a jpeg), just don;t use a picture multiple times (ie also not publishing am original).
You can define a much higher resolution version in the color spectrum than can actualy be seen. So you can slip in bits which are
humans can distinguish about 64 levels of color shades at most. So having a space of 256 levels gives you room to fix 2 bits per pixel that go indistinguishable. (24bit colourspace)
Structured data is a problem. The only imprecise stuff in a programming language/xml is the naming of constants & variables.
But if you change them in one part you need to change it in a lot of parts in a consistent way, otherwise it could be detectable wit a simple build task...?
but do you get enough free bits with that? At least variable names need te be meaningless rather long names to start with...
At least in a movie you might get more bits as the stream has a lot more bits i.e. you can use less bits per image which would avoid some detection.
Active today
Some thoughts:
a) maybe layer hiding as in the real data is in the embedded images and video stream or keys to decrypt the hidden data is in the embedded images.
b) at times, I also see it as injecting additional frames into the video stream - all black but in bits and byte with varied grays of black (to naked eye is still black)
c) thinking whether having mosaic type of images with bits spread through out will help or apply for video stream frames - meaning regular pattern occurences or encoding in each sub images. See http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.135.6853&rep=rep1&type=pdf
a) maybe layer hiding as in the real data is in the embedded images and video stream or keys to decrypt the hidden data is in the embedded images.
b) at times, I also see it as injecting additional frames into the video stream - all black but in bits and byte with varied grays of black (to naked eye is still black)
c) thinking whether having mosaic type of images with bits spread through out will help or apply for video stream frames - meaning regular pattern occurences or encoding in each sub images. See http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.135.6853&rep=rep1&type=pdf
Active today
There should be no pattern in it...
make a movie with images of old-school analog tv-sets that only show white noise...
That could be ideal stuff to hide things...
make a movie with images of old-school analog tv-sets that only show white noise...
That could be ideal stuff to hide things...
I appreciate everyones comment. However, i thoroughly understand the basics of embedding data in the least significant bit in standard image file formats, and sound formats.
I am mostly interested to see if there is a way that Adobe Flash can be used completely independent from any external embeds.
Simply put, can a a simple flash movie be used to hide data? and if so, how?
It could be through action scripting as well, but i am researching all options.
thanks
I am mostly interested to see if there is a way that Adobe Flash can be used completely independent from any external embeds.
Simply put, can a a simple flash movie be used to hide data? and if so, how?
It could be through action scripting as well, but i am researching all options.
thanks
Active today
Well a movie is a sequence of (partial pictures) ... ==> you can use each picture as a part of the pool to hide data in.
How can you change an action script without compromising your message & still keep it functional equivalent to a working script.
How can you change an action script without compromising your message & still keep it functional equivalent to a working script.
Active today
the pattern will not be ideal for hiding due to its regularity. I see it more of security through obscurity - set of decoding method which only the trusted parties know how to derive - that is set of pattern (or I should say) of codes/steps.
I see the video stream as possible channel to input the information - maybe at every frames, a specific position (or look up) in each has the byte changes to what you want to transmit across. not sure if that will trigger any integrity but doubt so as it can be seen as "noises" on the channel. The pix-elated spot in each frame may not be obvious ....
actionscript can be gotten by decompiling the SWF, so hiding in the codes strings etc may not be ideal. Also thinking whether flash metadata can be used to transmit the information, maybe translate duration, size decimal into hex byte, duration of flash represent specific information, links in the script are encoded .....
I see the video stream as possible channel to input the information - maybe at every frames, a specific position (or look up) in each has the byte changes to what you want to transmit across. not sure if that will trigger any integrity but doubt so as it can be seen as "noises" on the channel. The pix-elated spot in each frame may not be obvious ....
actionscript can be gotten by decompiling the SWF, so hiding in the codes strings etc may not be ideal. Also thinking whether flash metadata can be used to transmit the information, maybe translate duration, size decimal into hex byte, duration of flash represent specific information, links in the script are encoded .....
Featured Post
The road to profitability.
Delivering superior services is key to ensuring customer satisfaction and the consequent long-term relationships that enable MSPs to lock in predictable, recurring revenue. What's the best way to deliver superior service? One word: automation.
Question has a verified solution.
If you are experiencing a similar issue, please ask a related question
Suggested Solutions
| Title | # Comments | Views | Activity |
|---|---|---|---|
| Secure removal of files encrypted by windows EFS | 20 | 138 | |
| Header of docx file | 17 | 145 | |
| ipsec tunnel comme not up | 10 | 136 | |
| On-premise Digitally Signed/Encrypted Secure E-mail Solutions | 1 | 79 |
Many companies are looking to get out of the datacenter business and to services like Microsoft Azure to provide Infrastructure as a Service (IaaS) solutions for legacy client server workloads, rather than continuing to make capital investments in h…
This paper addresses the security of Sennheiser DECT Contact Center and Office (CC&O) headsets. It describes the DECT security chain comprised of “Pairing”, “Per Call Authentication” and “Encryption”, which are all part of the standard DECT protocol.
In this tutorial viewers will learn how to create a basic shape tween animation in Flash including shape hints for smooth animation
Open a new document in Flash: Draw a shape: Select another frame (how long you want the tween to be): Right click and…
The goal of the tutorial is to teach the user how to select the video input device.
Make sure you have an input device that in connected and work and recognized by Adobe Flash Media Live Encoder and select it in the “video input” menu.
Suggested Courses
Course of the Month2 days, 14 hours left to enroll
752 members asked questions and received personalized solutions in the past 7 days.
Join the community of 500,000 technology professionals and ask your questions.