(c) 1999-2004 by Niels Provos

OutGuess Resources 
 Main
 Download
 Information
 Detection

Related Information 
 Links
 Blog: misc security topics
 Articles
 Press Information

 Support 
 Send me books
 Leave a tip with PayPal
 - it's fast, free and secure

OutGuess.org

OutGuess 0.2
2001-10-02 - Niels Provos <provos@citi.umich.edu>
Support my hacking with the PayPal Tipjar.
News
 2004-09-06
     Improved version of stegdetect released. Stegdetect now supports linear discriminant analysis to detect any JPEG based stego system. It also features improved detection of F5.
 2002-09-25
     Fridrich, Goljan and Hogea's "Attacking the OutGuess" is capable of reliably detecting images with content embedded by OutGuess.
 2002-01-26
     Improved version of stegdetect released. Stegdetect now detects data at the end of JPEG files hidden with tools like appendX or camouflage.
 2001-12-21
     No hidden messages found in USENET analysis.
 2001-12-20
     Improved version of stegdetect released. Accuracy for jsteg and jphide detection improved. Stegbreak now uses the file magic utility to improve dictionary attack on outguess 0.13b.
 2001-10-12
     Steganography Trophy: First Steganographic Image found in the Wild.
Stegdetect and stegbreak were successful in finding and retrieving a hidden message from an image.
 2001-08-31
     Higher-level statistical tests detect OutGuess 0.2.
 2001-04-14
     Initial release of stegdetect. It detects hidden content in JPG images.
Currently detectable schemes are: jsteg, jphide and outguess 0.13b.
What is OutGuess
OutGuess is a universal steganographic tool that allows the insertion of hidden information into the redundant bits of data sources. The nature of the data source is irrelevant to the core of OutGuess. The program relies on data specific handlers that will extract redundant bits and write them back after modification. In this version the PNM and JPEG image formats are supported. In the next paragraphs, images will be used as concrete example of data objects, though OutGuess can use any kind of data, as long as a handler is provided.
How to get OutGuess
You can download OutGuess as UNIX source tar ball. OutGuess is available under a BSD software license. It is completely free for any use including commercial.

Please see each source file for its respective license. OutGuess was developed in Germany.

What is Steganography
Steganography is the art and science of hiding that communication is happening. Classical steganography systems depend on keeping the encoding system secret, but modern steganography is detectable only if secret information is known, e.g. a secret key. Because of their invasive nature, steganography systems leave detectable traces within a medium's characteristics. This allows an eavesdropper to detect media that has been modified, revealing that secret communication is taking place. Although the secrecy of the information is not degraded, its hidden nature is revealed, defeating the main purpose of Steganography.
What does OutGuess do differently
For JPEG images, OutGuess preserves statistics based on frequency counts. As a result, statistical tests based on frequency counts are unable to detect the presence of steganographic content. Before embedding data into an image, OutGuess can determine the maximum message size that can be hidden while still being able to maintain statistics based on frequency counts. This approach has been described in

OutGuess uses a generic iterator object to select which bits in the data should be modified. A seed can be used to modify the behavior of the iterator. It is embedded in the data along with the rest of the message. By altering the seed, OutGuess tries to find a sequence of bits that minimizes the number of changes in the data that have to be made.


Last modified: July 12 2008 01:56:57 AM
Copyright 1999-2008 by Niels Provos