SecurityWorldMarket

21/03/2017

University develops technique for preventing cyber attacks

Beer Sheva, Israel

A Ben-Gurion University of the Negev (BGU) researcher has developed a new technique that could provide virtually 100 percent protection against cyber attacks launched through internet videos or images, which are a growing threat.

“Any downloaded or streamed video or picture is a potential vehicle for a cyber attack,” says Professor Ofer Hadar, chair of BGU’s Department of Communication Systems Engineering. “Hackers like videos and pictures because they bypass the regular data transfer systems of highly secure systems, and there is significant space in which to implant malicious code.”

Cyber security has become a high-profile issue, made even more so by recent Wikileaks allegations against the Central Intelligence Agency, accusing them of bypassing security encryption on a variety of smart devices.

Yet, attacks on internet video and pictures are a broader, lesser-known threat. Internet video will comprise 82 percent of all global consumer internet traffic by 2020, according to the 2016 Cisco Visual Networking Index research report. As a result, downloaded and shared videos and images are a growing target for cyber attackers.

To counter this emerging threat, Prof. Hadar developed a series of algorithms that can completely prevent attackers from being able to infiltrate and extract information through videos or pictures.

His techniques combat steganography, a process that involves hiding a message in an appropriate carrier, such as an image file. Utilising steganography, the carrier can be sent to a receiver without anyone else knowing that it contains a hidden message.

“We are dealing nowadays with the use of steganography to insert malicious codes within videos and photos to attack the viewer,” explains Prof. Hadar. “We have developed algorithms to find a solution to that problem in the ‘compressed domain.’ The idea is to manipulate the file’s ‘payload’ to remove the malicious code without damaging the data quality.”

Prof. Hadar’s approach, which he has dubbed The Coucou Project, addresses two potential attack scenarios. Both scenarios assume that basic malware has been planted on the victim's servers/hosts by means of social engineering, such as phishing scams or other means of exploiting data vulnerability. From there, the malware gathers classified information from the victim's data centre.

In the first scenario, once the user uploads an image or a video to a social network, the malware embeds the classified information into the uploaded content (making it accessible to the attacker). In the second scenario, the attacker uploads infected content to a social network or any other shared server where the malware can extract the malicious code and execute it.

“Preliminary experimental results show that a method based on a combination of Coucou Project techniques results in virtually 100 percent protection against cyber attacks,” says Prof. Hadar. “We envision that firewall and antivirus companies will be able to utilise Coucou protection applications and techniques in their products."

The Coucou Project receives funding from the BGU Cyber Security Research Center and the Basecamp Innovation Center at the Advanced Technologies Park adjacent to BGU, which is interested in developing the protective platform into a commercial enterprise.


Tags

Product News

Dahua Technology launches ePoE IP system

Dahua Technology Co., Ltd. is launching a system of extended Power over Ethernet (ePoE) devices including cameras, network switches and network recorders. Dahua ePoE IP system supports up to 800 metres between the ePoE camera and the ePoE network switch or ePoE NVR with an embedded switch. It overcomes the limitations of traditional Ethernet and POE (both restrict cable distances to around 100 metres (328 feet) between network ports) and eliminates the need for Ethernet extension devices or additional network switches.

Business News

Schema for Dahua facial recognition technology

The future is here - when surveillance meets AI

What will the world be like when surveillance meets AI (Analytics Intelligence)?

According to an IHS report from September 2016, security camera shipments continue to grow at 14.1% CAGR and are predicted to reach 190 million units in 2020, despite revenue growth having slowed to 8.1% CAGR. There are just too many cameras and video footage to be digested by human operators. Most security video footage is erased or over-written without being watched. Video Analytics (VA) Technology was once perceived as a solution to automate the utilisation of abundant video footage resources. By means of identifying and tagging the appearance of certain patterns in a video, the VA or AI system could perform search and run statistics on it.

Product Suppliers
Back to top