December 01, 2005 — CSO —
Digital photography, Photoshop and synthetic computer graphics have made image trickery both easier to commit and harder to detect. But it is still possible to catch tamperingprovided you have a good eye and the right tools.
Physical impossibility is a good giveaway. For example, a current advertisement for a four-wheel-drive sedan that shows lots of two-wheel-drive vehicles up on their back wheels ("Why pay for four wheels if youre only using two of them?") is clearly faked because the shadows on the pavement dont match the cars up in the air. So sometimes, detecting a forged image simply requires looking closely. In another recent high-profile example, the crowds in photos released by the Bush reelection campaign in October 2004 had been digitally enhanced with extra faces. Careful observers found that some of the faces were present more than once in the same crowd shot.
Another visual clue: Look pixel-by-pixel at a digital image and you might be able to see the sharp lines that result when one image is pasted on top of another.
There are also some clues unique to the digital world. For example, the vast majority of todays cameras take .jpeg-format digital pictures at predetermined sizes such as 640x480 or 1024x768. If you come across a .jpeg thats an odd sizesay, 500 pixels squarethen you know that part of the original image has been cropped.
Researchers at Dartmouth College have developed sophisticated algorithms for detecting manipulation of digital images in general and .jpegs in particular. Because .jpeg is a compressed file format, any tampering with an image from a digital camera usually results in the .jpeg image being twice-compressed: once by the camera, and once by Photoshop. This double-compression leaves tell-tale artifacts in the image that can be detected through the use of advanced algorithms. Today this kind of technology is still in the research laboratory, but if you have a copy of Matlab you can download the algorithms and try them out yourself. Also on the website is an interesting collection of digitally tampered magazine covers.
Read more about data protection in CSOonline's Data Protection section.
The challenge of true data protection spans databases, internal and external networks, physical and offsite storage, business partners and more. These resources offer expert perspective from the basics through specific key elements of data protection strategies.
Network security basics
Protection, detection, and reaction—those are the three underlying principles your security program must embody
Computer incident detection, response, forensics
Richard Bejtlich shows how to measure and improve the maturity of your incident response
A few good IT security metrics
Stop counting blocked malware attachments and measure things that can contribute to meaningful change
5 key cloud security trends
Cloud security is evolving rapidly—stay on top of it
IT risk assessment frameworks
How to do end-to-end encryption
How to compare and use enterprise antivirus
Also find sample data protection policies in CSO's tools, templates and policies library
- Introduction to VMware vCenter Site Recovery Manager 5
- Introduction to Virtualization
- Preventing Unplanned Downtime with Server Virtualization
- Secure Cloud Infrastructure and Next-Generation Data Centers - An Interactive Panel for Decision Makers
- Gartner Next Generation Network IPS Webcast
- Understand Your Data: The Future of Backup and Archiving
- Overcome Top 7 Admin Challenges of Active Directory
- Insiders Can Ruin Your Company. Take Action.
- Top Solutions and Tools to Prevent Devastating Malware
- X-Ray of the PCI Process-4 Proactive Steps
- Streamline Compliance and Increase ROI
- Beyond SFTP: Five Ways Secure Managed File Transfer Can Improve Your Business
CSO Corporate Partners
- Patch Tuesday preview, February 2012
Microsoft published its Patch Tuesday Preview for February of 2012 a few minutes ago. IT admins can expect nine bulletins to address 21 security vulnerabilities.
It looks like four bulletins will be rated critical while the rest are designated as important.
Affected Microsoft products are:
- M86 report proves water is wet
- Actor, banker, soldier, spy: Suits and Spooks Anti-Conference aims to redefine security
More Salted Hash with Bill Brenner
