Limiti e Potenzialità Software Image/Video Forensics

Limiti e Potenzialità
Software Image/Video
Forensics
Prof. Sebastiano Battiato
Dipartimento di Matematica e Informatica,
Università di Catania
Image Processing LAB – http://iplab.dmi.unict.it
[email protected]
Che tool usare?
• General Purpose
– Photoshop (GIMP, ImageJ)
• Problemi di learning e di documentazione
• High-level (ci si scrive da se il codice che
serve..solo per esperti )
– Matlab
– OpenCV library
• Forensics Software
Tools per tutti
• Visualizzatori
–
–
–
–
ACDSee
Irfanview
Faststone viewer
Xnview
• Editor
–
–
–
–
Adobe Photoshop
The Gimp
Paint Shop Pro
ImageJ
Software dedicati
- AMPED Five & Authenticate (http://ampedsoftware.com )
- dTective di Avid e Ocean Systems ClearID (http://www.oceansystems.com/dtective/form/ )
- LucisPro (http://www.LucisPro.com)
- Ikena Reveal di MotionDSP (http://www.motiondsp.com/products/IkenaReveal/form )
- Video Focus di Salient Stills (http://www.salientstills.com/products/videofocus/purchase.html)
- Impress di Imix (http://www.imix.nl/impress/impress_contact.htm )
- Video Investigator di Cognitech (http://www.cognitech.com/content/blogcategory/24/28/ )
- StarWitness di SignalScape (http://www.starwitnessinfo.com/ )
- VideoAnalyst di Intergraph (http://www.intergraph.com/learnmore/sgi/public-safety/forensicvideo-analysis.xml )
- CrimeVision di Imagine Products (www.crimevision.net )
- Adroit Photo Forensics (http://digital-assembly.com/products/adroit-photo-forensics/ )
- Image Error Level analyzer (http://errorlevelanalysis.com/)
- JpegSnoop (http://www.impulseadventure.com/photo/jpeg-snoop.html )
- NFI PRNU Compare (http://sourceforge.net/projects/prnucompare/)
- Image Forensics Search System (http://www.cse.ust.hk/image_forensics/ )
- Videntifier (http://www.eff2.net )
Today
•
•
•
•
•
•
AMPED5
ImageJ + Forensics Plugin
Adroit
Videntifier
Exif Analyzer
GIMP
http://ampedsoftware.com/it/
AMPED5
• http://ampedsoftware.com/
Trial per il corso
http://rsb.info.nih.gov/ij
Progetto Open source
Due Modalità di Scripting:
- Java Plugins
- Macro
Vengono rilasciati periodicamente degli upgrade
Migliaia di utenti in differenti contesti
Image Menu
Process Menu
Analyze Menu
Plugins Menu
Help Menu
Image Forensics
Progetti degli studenti di Informatica per
il corso di Computer Forensics
tenutosi presso l’Università di Catania a
partire dall’’A.A. 2010/2011
svg.dmi.unict.it/iplab/imagej/index.htm
ADROIT Photo Forensics 2011 – Digital Assembly
digital-assembly.com/products/adroit-photo-forensics/
Confronti
Demo…
Content Filtering
•
•
•
•
•
Metadata - timeline, model
Skintones
Faces
Similar images
Objects
(http://www.eff2.net/ )
Classical Hashing on Images:
Some Sources of Variability
Scale
Original
Rotation
Crop
Light
Image:
Original:
Rotation:
Scale:
Crop:
Light:
Pose:
Context:
MD5
5972FB15A2FDFA7215134B5BACD4D032
6B0BC6F3DBD450EF3E9BE8CCBDB2480F
D3CFFA588D5B4CF3395A69AC6EDAB4A5
6CF3D1FD20388DE3F8D1858C4D7A53C7
38B5E48E46898E1E5E7207AEB4255518
9030E506156664E0BBD6AA76F3CA1748
0F3055E092C73155690C822D6BA18BAD
Pose
Context
Image Matching
Distance(
,
)=LOW
Distance(
,
)=HIGH
Altre soluzioni
• Photo DNA
(http://www.microsoftphotodna.com/ )
• VideoGenome
(http://v-nome.org/ )
Main Idea: Matching tra signature
Exif Informations
• ExIF allows to integrate further information into
the file.
• The information usually contained into a
standard ExIF are:
• Dimensions of the image
• Date and Time of Acquisition
• Features about acquisition:
• Exposure-time , Exposure Bias, FNumber, Aperture, ISO, Focal lenght, GPS
coordinates etc.
• Thumbnail preview (a small picture which
would be equal to the original picture).
• The ExIF information checking has demonstrated
the possibility of immediate forgery detection.
• In effect if the constructor is known several ExIF
data must match to fixed values.
Thumbnails Analysis
• Using the following image we can extract the thumbnail
through simple ExiF tools, web sites or open source codes,
like:
• Opanda IExif
(http://www.opanda.com)
• Camera Summary
(http://camerasummary.com/ )
• Jeffrey's Exif Viewer
(http://regex.info/exif.cgi )
• JPEGSnoop
(http://www.impulseadventure.com/photo/jpeg-snoop.html )
• Jhead version
(http://www.sentex.net/~mwandel/jhead/ )
• These tools permit to identify data that have not
been removed by inexpert users.
Casi Famosi
Cat Schwartz
http://www.welcometowallyworld.com/cat-schwartz/
GIMP
• PLUGINS (elsamuko)
• sites.google.com/site/elsamuko/forensics
Ricerca delle Immagini via web
• Utilizzo di tecniche avanzate per la ricerca
automatica di immagini via TAG (o
metadata).
• Siti come Flickr/Google/Bing/TinEye
permettono di effettuare ricerca di
immagini utilizzando dettagli riguardanti
particolari delle fotografie
• E’ possibile interrogare automaticamente
database online attraverso script.
Referenze
•
•
•
•
•
S. Battiato, G. Messina, R. Rizzo - Image Forensics Contraffazione Digitale e Identificazione della Camera di
Acquisizione: Status e Prospettive - Chapter in IISFA
Memberbook 2009 DIGITAL FORENSICS - Eds. G. Costabile, A.
Attanasio - Experta, Italy 2009;
S. Battiato, G.M. Farinella, G. Messina, G. Puglisi - Digital Video
Forensics: Status e Prospettive -Chapter in IISFA Memberbook
2010 DIGITAL FORENSICS - Eds. G. Costabile, A. Attanasio Experta, Italy 2010.
S. Battiato, G.M. Farinella, G. Puglisi - mage/Video Forensics:
Casi di Studio -Chapter in IISFA Memberbook 2011 DIGITAL
FORENSICS - Eds. G. Costabile, A. Attanasio -Experta, Italy 2011
(In press).
R.C. Gonzalez, R.E. Woods - Elaborazione delle Immagini
Digitali - ISBN: 9788871925066 Pearson Italia (2008) - Supervised
by S.Battiato and F. Stanco.
http://www.dmi.unict.it/~battiato/CF1011/sw%20Image%20Forensic
s%20esistenti.pdf