Skip to content

Steganalysis

Definition

The detection of steganographic content in carrier files, using statistical, machine-learning, or tool-signature methods to determine whether a file has been modified to hide a payload.

Related terms

Blind steganalysis
Detection without prior knowledge of the embedding algorithm. A classifier trained on images with and without payloads generalises across multiple tools.
Embedding rate
The payload size divided by the carrier capacity, usually expressed as bits per pixel. Detection difficulty decreases sharply at low embedding rates...
False-positive rate (FPR)
The proportion of clean (non-stego) files that a detector incorrectly flags as containing hidden data. High FPR increases investigator workload; it does...
Rich model steganalysis (SRM)
A feature-extraction approach that computes hundreds of statistical features from pixel-residual co-occurrence matrices and feeds them to an ensemble classifier such as...
Targeted steganalysis
Detection methods designed against a specific steganography tool or algorithm. Effective when the tool is known but fails against novel or unknown...

Explained in

Your journey to becoming a forensic professional starts here.

Practice with mock tests, learn from structured notes, and get your questions answered by a global forensic community, all in one place.