Screen watermarking for data theft investigation and attribution
Abstract
Organizations not only need to defend their IT systems against external cyber attackers, but also from malicious insiders, that is, agents who have infiltrated an organization or malicious members stealing information for their own profit. In particular, malicious insiders can leak a document by simply opening it and taking pictures of the document displayed on the computer screen with a digital camera. Using a digital camera allows a perpetrator to easily avoid a log trail that results from using traditional communication channels, such as sending the document via email. This makes it difficult to identify and prove the identity of the perpetrator. Even a policy prohibiting the use of any device containing a camera cannot eliminate this threat since tiny cameras can be hidden almost everywhere. To address this leakage vector, we propose a novel screen watermarking technique that embeds hidden information on computer screens displaying text documents. The watermark is imperceptible during regular use, but can be extracted from pictures of documents shown on the screen, which allows an organization to reconstruct the place and time of the data leak from recovered leaked pictures. Our approach takes advantage of the fact that the human eye is less sensitive to small luminance changes than digital cameras. We devise a symbol shape that is invisible to the human eye, but still robust to the image artifacts introduced when taking pictures. We complement this symbol shape with an error correction coding scheme that can handle very high bit error rates and retrieve watermarks from cropped and compressed pictures. We show in an experimental user study that our screen watermarks are not perceivable by humans and analyze the robustness of our watermarks against image modifications.
People
BibTex
@INPROCEEDINGS{gugelmann2018screen,
isbn = {978-9-9499-9043-6},
doi = {10.23919/CYCON.2018.8405027},
year = {2018},
booktitle = {10th International Conference on Cyber Conflict CyCon X: Maximising Effects},
type = {Conference Paper},
author = {Gugelmann, David and Sommer, David and Lenders, Vincent and Happe, Markus and Vanbever, Laurent},
issn = {23255374},
language = {en},
address = {Piscataway, NJ},
publisher = {IEEE},
title = {Screen watermarking for data theft investigation and attribution},
PAGES = {391 - 408},
Note = {10th International Conference on Cyber Conflict (CyCon); Conference Location: Tallinn, Estonia; Conference Date: May 29 - June 1, 2018}
}Research Collection: 20.500.11850/281731