基于逆向工程的信息隐藏软件研究

Reverse engineering-based steganographic software

采用软件逆向工程的方法,借助静态和动态软件逆向分析工具IDA Pro和SoftICE,研究了某款商用信息隐藏软件,逆推出该软件系统总体执行过程,在此基础上分析出其核心信息隐藏算法以及数据加解密算法,为解决商用信息隐藏软件的检测问题提出一种新的思路.采用本方法能够检测一幅图片中是否存在由该信息隐藏软件隐藏了信息,并且无论加密与否都能够正确提取出来.

With the help of public available static and dynamic software reverse analysis tools such as IDA Pro and SoftlCE, one commercial information hiding software without source code was analyzed by applying the method of software reverse engineering, inferred entire execution procedure of this software system, cracked the core information hiding algorithms and data encrypt algorithms and then proposed a new method for the detection of commercial information hiding software. Using the method stated in this paper, we can detect a picture to make a decision if there is information hidden though this kind of information hiding software in it and pick out the information correctly, whether it is en crypted or not.