AFusionofMaximumLikelihood andStructuralSteganalysis AndrewKer - - PowerPoint PPT Presentation

a fusion of maximum likelihood and structural steganalysis
SMART_READER_LITE
LIVE PREVIEW

AFusionofMaximumLikelihood andStructuralSteganalysis AndrewKer - - PowerPoint PPT Presentation

AFusionofMaximumLikelihood andStructuralSteganalysis AndrewKer


slide-1
SLIDE 1

AFusionofMaximumLikelihood andStructuralSteganalysis

AndrewKer

  • InformationHidingWorkshop,StMalo

12June2007

slide-2
SLIDE 2

AFusionofMaximumLikelihood andStructuralSteganalysis

Outline

  • Maximumlikelihood&structuralsteganalysis
  • Newstructuralanalysis% likelihoodfunction
  • Maximization
  • Experimentalresults
  • Conclusions&furtherwork
slide-3
SLIDE 3

SteganalysisofLSBReplacement

Replacementoflow*orderbitsisparticularlyinsecuresteganographybecause

  • fcombinatorialstructure.

MaximumLikelihoodSteganalysis !"#"$ % &'$ ( )'&

  • Foundedonsoundstatisticalprinciples,
  • Requiresknowledge/estimationofcoversourcePMF/transitionmatrix/etc,
  • Inaccurateestimatorinpractice.

Dabeeretal,*+++, -,2004. Hoganetal.-*+"*.,+*,2005. Draperetal.*/0&,2005. Sullivanetal.*+++, *,2006.

slide-4
SLIDE 4

SteganalysisofLSBReplacement

Replacementoflow*orderbitsisparticularlyinsecuresteganographybecause

  • fcombinatorialstructure.

StructuralSteganalysis !""$ % 1$ ( 2'

  • Dubiousstatisticalrigour,
  • Requireslessknowledgeaboutcovers,
  • Highlysensitiveinpractice.

Dumitrescuetal,*+++, -,2003. Luetal.*/0&,2004. Ker,*/0&,2005. Ker,*+++, *,2007.

slide-5
SLIDE 5

SteganalysisofLSBReplacement

Replacementoflow*orderbitsisparticularlyinsecuresteganographybecause

  • fcombinatorialstructure.

StructuralSteganalysis !""$ % 1$ ( 2'

  • Dubiousstatisticalrigour,
  • Requireslessknowledgeaboutcovers,
  • Highlysensitiveinpractice.

CanwemergethestatisticalrigourofMLdetection withthesensitivefeaturesfoundinstructuralsteganalysis?

slide-6
SLIDE 6

TraceSubsets

Everypair ofadjacentsamplesisclassifiedaccordingtotheirvalues: forexample, Itisalsousefultowritei.e.pairs

  • wouldbeclassified
  • wouldbeclassified
slide-7
SLIDE 7

TraceSubsets

Everypair ofadjacentsamplesisclassifiedaccordingtotheirvalues:

EmbeddingProcess

Suppposeacoverofsize. Uncorrelatedpayloadofsize embeddedbyreplacingLSBsofapseudo' random selectionofvalues,so LSBflipsareindependentwithprobability'''*

slide-8
SLIDE 8

Coverobject Stegoobject flipneither: probability LSBflipsareindependentwithprobability'''*

slide-9
SLIDE 9

Coverobject Stegoobject flipboth: probability LSBflipsareindependentwithprobability'''*

slide-10
SLIDE 10

Coverobject Stegoobject LSBflipsareindependentwithprobability'''*

slide-11
SLIDE 11

Coverobject Stegoobject

slide-12
SLIDE 12

Toestimate

  • :
  • 1. Assumecovermodel:

innaturalimages;

  • 2. Consideronlyodd;
  • 3. Assume

Coverobject Stegoobject

slide-13
SLIDE 13

NewStructuralAnalysis

  • Recallthat.Supposethepartitionisrandom.

i.e.,imaginethatacoverobjectisderivedfroma“pre*cover”,inwhich arefixed,withpairsmovingindependentlyatrandom: Thismodelisvalidatedintheliterature,exceptfor

A.Ker,2+2#3$IEEETrans.InformationForensicsand Security2(2):140*148,2007.

“Pre'cover” Coverobject

slide-14
SLIDE 14

“Pre'cover” Coverobject Stegoobject

slide-15
SLIDE 15

“Pre'cover” Coverobject Stegoobject

slide-16
SLIDE 16

“Pre'cover” Coverobject Stegoobject

slide-17
SLIDE 17

Stegoobject “Pre'cover”

slide-18
SLIDE 18

# # Vectorofprobabilities Stegoobject “Pre'cover”

slide-19
SLIDE 19

# # Vectorofprobabilities Vectorofprobabilities Vectorofprobabilities Vectorofprobabilities Vectorofprobabilities Stegoobject “Pre'cover”

slide-20
SLIDE 20

LikelihoodFunction

Giventhesizesofthetracesubsetsinthepre*cover

  • ,and,thedistributionof
  • isasumofmultinomials:

well*approximatedby Thelog*likelihoodofanobservation

  • f
  • istherefore

where isthelengthofthevector

  • .
slide-21
SLIDE 21

Σ

slide-22
SLIDE 22

MaximumLikelihood

Estimator:find (and

  • )tomaximize
slide-23
SLIDE 23

MaximumLikelihood

Estimator:find (and

  • )tomaximize

Difficulties:

  • Noanalyticalmaximum(can’tevendifferentiate!)

)

  • Dimensionality:

512dimensionalmaximizationproblem eachlikelihoodevaluationinvolvesaquadraticformoflength1020

  • Overfitting

)!-4 24 44 33

slide-24
SLIDE 24

ExperimentalResults

Experimentsconductedon3000never*compressedgrayscalebitmapimages, size0.3Mpixels. ComparedStructural/MLestimatorswithstandardstructuralestimatorsby (asestimatesfor).

slide-25
SLIDE 25

ExperimentalResults

SamplePairsAnalysis(SPA)1

  • 1S. Dumitrescu. 25.IEEETransactionsonSignal

Processing51(7):1995–2007.2003.

2P.Lu !5.6th InformationHidingWorkshop,

SpringerLNCS3200:116–127.2004

LeastSquaresSPA2 MLPairs

  • meansquareerror
slide-26
SLIDE 26

ExperimentalResults

SamplePairsAnalysis(SPA)1 LeastSquaresSPA2 MLPairs

  • meansquareerror

For1Mpixelimages,benchmarks: ‒ SPAandLeastSquaresSPA:21images/sec ‒ MLPairs:0.4images/sec

slide-27
SLIDE 27

WideningtheApplication

Otherstructuralsteganalyses,e.g.

  • ofLSBreplacementintripletsofpixels1
  • ofreplacementoftwo*leastsignificantbits2(“2LSB”)

canreceivethesametreatment. &6$

1A.Ker.!&5.7th InformationHiding

Workshop,SpringerLNCS3727:296–311.2005.

2A.Ker.+,5.IEEETrans.InformationForensicsandSecurity

2(1):46–54.2007.

slide-28
SLIDE 28

ExperimentalResults(2LSB)

WSfor2LSB1

1X.Yu.+'5.IEEEInternationalConferenceonImage

Processing,vol.2:1102–1105.2005

2A.Ker.+,5.IEEETrans.InformationForensicsandSecurity

2(1):46–54.2007.

LeastSquaresfor2LSB2 MLPairsfor2LSB

  • meansquareerror
slide-29
SLIDE 29

NewStructuralAnalysis

  • Recallthat.Supposethepartitionisrandom.

i.e.,imaginethatacoverobjectisderivedfroma“pre*cover”,inwhich arefixed,withpairsmovingindependentlyatrandom: Thismodelisvalidatedintheliterature,exceptfor “Pre'cover” Coverobject

slide-30
SLIDE 30

Conclusions

  • Itispossibletoproduceastatistically*rigorouslikelihoodanalysisofthe

structureofbitreplacement. ,

  • EstimationviatheML/structuralcombinationisusuallymoreaccuratethan

MLorstructuralsteganalysisalone…

  • Sometimesthemaximizationiscomputationallyinfeasible.

,1&7 – #8 – '8

  • Needtorefinethecovermodeltoimproveperformanceonlargepayloads.

,1&

slide-31
SLIDE 31

End