Backbone Security Releases New Version of Popular StegAlyzer Tools

Thu, 29 Apr 2010 10:07:27 -0400

Backbone Security is pleased to announce the release of V3.2 of their popular StegAlyzerAS and StegAlyzerSS digital forensics tools. Developed in Backbone's Steganography Analysis and Research Center (SARC), the tools are widely used by US and international law enforcement agencies; the intelligence community; and private sector computer forensic examiners to detect the presence or use of steganography applications on seized digital media.

StegAlyzerAS detects the fingerprints (i.e., hash values) of file and registry artifacts associated with 812 steganography applications. StegAlyzerSS detects the signatures of more than 50 of those applications and provides an automated extraction capability, a "point-click-and-extract" interface, for a growing number of those applications.

This version features Windows 7 compatibility along with the implementation of disk image mounting technology from Paraben Corporation. Through the integration of technology from Paraben's popular P2 eXplorer, the tools currently support the following image types: CD/DVD, EnCase (up to V6), SMART, Safeback, RAW, and Paraben's Forensic Replicator (PFR) (compressed and encrypted).

Version 3.2 also features the capability to install and run the tools on 64-bit platforms in 32-bit mode. A version that can run in true 64-bit mode will be released in the near future.

About the SARC:
The SARC (www.sarc-wv.com) is a Center of Excellence in steganography research and development within Backbone Security. Established to create and maintain a national repository of steganography applications, fingerprints, and signatures that can be consulted during the forensic examination of seized media, the SARC has created the world's largest hash set exclusive to steganography applications. The SARC has become the industry leader in developing world-class forensic tools and techniques for detecting and extracting information hidden with steganography applications.

About Backbone Security:
In addition to hosting the SARC, Backbone (www.backbonesecurity.com) is a PCI Data Security Standard (DSS) Approved Scanning Vendor that conducts automated PCI DSS compliance assessments with their industry leading One-Stop Scanning Solution. Backbone also provides real-time intrusion monitoring, vulnerability assessment, and business continuity and disaster recovery planning services.

About Paraben Corporation:
Paraben (www.paraben.com) specializes in comprehensive digital forensic solutions for handhelds, hard drives, enterprise networks, and consumers. Handheld innovations offer 360 degrees of solution power from seizure to analysis. Hard drive solutions move to the next level by solving problems through a specialized tool approach and a single command suite. Enterprise technologies top off the repertoire with proactive and reactive solutions for networks. These solutions work through a stealth client server system that responds to, or prepares you, for any issue in your network where forensic-grade data is key. Finally, Paraben's technology allows parents to protect their family from illicit images and unwanted online predators. From technology to services Paraben provides effective results.

StegAlyzer™ is a trademark of Backbone Security.

Backbone Security Teams with Fidelis Security Systems to Provide Further Defense-In-Depth for Evolving Cyber Threats

Wed, 28 Apr 2010 09:56:24 -0400

Backbone Security, the global leader in digital steganography detection tools, today announced a partnership with Fidelis Security Systems, the market leader in comprehensive information protection solutions for the prevention of data breaches, to give Fidelis' customers the capability to detect digital steganography applications on their networks.

Steganography is a method of concealing the existence of date by hiding it within another file. Unlike encrypting data the way cryptography does, steganography hides the very existence of the data in such a way that it is undetectable under traditional traffic-pattern analysis. Steganography is most often used for malicious purposes such as stealing information or concealing criminal or terrorist activity. Steganography applications are used to hide information in a file by appending it to, or embedding it within, another file.

Through this partnership and technology integration, Fidelis' flagship session-level network security solution, Fidelis XPS(TM), will be capable of analyzing and detecting steganography applications through Backbone's Steganography Application Fingerprint Database (SAFDB). SAFDB is the world's largest commercially available hash set exclusive to digital steganography applications and can be used to determine whether files traversing the network can be associated with a particular digital steganography or other data-hiding application. Developed in Backbone's Steganography Analysis and Research Center (SARC), SAFDB contains seven different fingerprints, or hash values, of each file artifact associated with all 812 digital steganography applications in the database.

The joint solution will consist of a set of Fidelis XPS profiles or "fingerprints" derived from SAFDB. Fidelis XPS customers will be able to license the fingerprint set directly from Backbone Security on a subscription basis

"With our data set, Fidelis XPS customers have the capability to counter the growing threat from insider use of steganography to exfiltrate sensitive information." said Jim Wingate, Vice President of Backbone and Director of the SARC. "We are excited to be working with the experts in Fidelis Security Systems who are leading the way in deploying next-generation network security solutions to detect malicious insiders attempting to use steganography to steal sensitive information."

Additionally, Backbone Security has joined the Fidelis Technology Partnership Program which is designed to enable the development of joint solutions that combine Fidelis technology with partners' technologies in support of customer requirements. The program enables Fidelis technology partners to leverage Fidelis' leading-edge technology including sophisticated document decoding, content analysis and policy engines.

"Again, Fidelis XPS is leading the industry as the first and only network security solution capable of detecting the latest in emerging and evolving threats such as steganography applications," said Peter George, CEO of Fidelis Security Systems. "Through this partnership with Backbone Security, we are pleased to be able to give our customers yet another way to protect their most valued information from data exfiltration and defend their networks from threats, whatever their origin."

Upcoming Webinar:
Learn more about the new evolving threats on your network, including steganography, by attending the "Data Exfiltration Issues in Your Network Today" at 1:00 p.m. EDT on April 29, 2010. Please visit www.fidelissecurity.com/webinars to register.

About Backbone Security:
Backbone Security provides world-class digital steganography research and development in their Steganography Analysis and Research Center (SARC). The SARC has created the world's largest commercially available hash set exclusive to steganography applications and is the leading provider of world-class forensic tools and techniques for detecting the presence or use of steganography applications and extracting information hidden with those applications.

Backbone is also a PCI Data Security Standard (DSS) Approved Scanning Vendor that provides automated PCI DSS compliance assessment services with their industry leading One-Stop Scanning Solution as well as real-time intrusion monitoring, certification and accreditation, business continuity planning, and disaster recovery planning services. Learn more about Backbone Security by visiting: www.backbonesecurity.com.

About Fidelis Security Systems:
Fidelis Security Systems provides organizations with the power to leverage their sensitive information while protecting it from data leakage and cyber attacks. Built on a patented deep session inspection™, platform, the Fidelis Extrusion Prevention System® is the industry's only next-generation network security solution with the visibility and control necessary to stop data breaches by uniquely working at the session-level.

Fidelis enables their government, military, and commercial enterprise customers around the globe to achieve comprehensive information protection in real time on multi-gigabit speed networks-allowing them to protect content, control application activity, enforce encryption policy, and mitigate threats. Learn more about Fidelis Security Systems by visiting: www.FidelisSecurity.com.

Backbone Announces Partnership with Paraben Corporation

Thu, 22 Apr 2010 09:09:41 -0400

Backbone Security, the global leader for digital steganography detection tools, is pleased to announce their partnership with Paraben Corporation. Backbone will utilize Paraben’s virtual image mounting technology commonly known as P2 eXplorer in the steganography detection tools developed in Backbone’s Steganography Analysis & Research Center (SARC).

With P2 eXplorer, digital forensics examiners using either the Steganography Analyzer Artifact Scanner (StegAlyzerAS) or Steganography Analyzer Signature Scanner (StegAlyzerSS) tool can mount forensic images and explore them as though the image was a drive on the examiner’s forensic workstation while preserving the forensic nature of the evidence. In fact, P2 eXplorer is one of the only programs that mount images as both logical and physical disks. This means all the deleted, slack, and unallocated space is accessible. An image isn't just mounted to view logical files; it is mounted as an actual bit-stream image, preserving unallocated, slack, and deleted data.

For more information about StegAlyzerAS and StegAlyzerSS, please visit www.sarc-wv.com or send email to sarc@backbonesecurity.com. For more information about Paraben’s forensics tools, please visit www.paraben.com or send email to forensics@paraben.com.

Backbone Selected as a Prime Contractor for West Virginia ITECH10 Contract

Mon, 19 Apr 2010 10:23:51 -0400

Backbone Security and their teaming partner, DSD Laboratories, Inc., is pleased to announce the State of West Virginia has selected Backbone as a prime contractor on the ITECH10 contract, a blanket open-end statewide contract.

The contract provides temporary staffing with computer technical expertise and provides technology services for projects to all West Virginia agencies and political subdivisions.

Backbone was awarded the following categories:

Supplemental Staffing

 Web Programming
 Computer Systems Analysis
 Computer System/Network Security
 Database Management
 Desktop Support
 Help Desk Support
 IT Support Staff – Operations
 LAN/WAN Support
 Enterprise Services
 Electronic Commerce/EDI
 Project Management Services
 Telecommunications Services
 Business Analyst Services

Project-Based Services

 Electronic Government
 Internet/Intranet and Electronic Commerce Security Development & Implementation
 Electronic Commerce – Web-based Development
 Technology Advisory Services
 Major Project Implementation
 Migration of Legacy Systems
 Project Quality Assurance Review and Associated Services

For further information, please contact Jim Wingate, Vice President, at (304) 366-9161 or Email: jwingate@backbonesecurity.com

Backbone Security Delivers Steg Course in Turkey

Tue, 25 Nov 2008 12:05:20 -0500

Backbone Security technical staff members have just returned from their first international training trip to Ankara where they taught an advanced computer forensic course to students from the Turkish National Police.
Chad Davis and Rob Lipscomb taught the Certified Steganography Examiner™ training course that was developed in Backbone’s Steganography Analysis and Research Center (SARC).
Steganography is the art and science of writing hidden messages in such a way that no one apart from the sender and intended recipient even realizes there is a hidden message. Finding and extracting the hidden information is called steganalysis.
Backbone developed the course to raise awareness of the threat from use of digital steganography to conceal evidence of criminal activity. The course features an introduction to the history of steganography since the days of the Ancient Greeks along with in-depth technical information on the various methods for hiding information.
During the second day of the two-day course, students use the advanced steganalysis tools developed in the SARC in laboratory exercises designed to simulate a realistic computer forensic examination. The students learn how easy it is for criminals to use anti-forensic tools such as digital steganography applications and how it’s impossible to find and extract hidden evidence without highly advanced special purpose computer forensic tools such as those developed in the SARC.
“Our course demonstrates the ease with which insiders can steal sensitive information and bad guys can conceal evidence of criminal activity. We also show the students how our tools can help them find and extract information of possible evidentiary value that may have otherwise been overlooked.” said Bill Krebs, President and Chief Operating Officer of Backbone.
According to Bart Guerreri, Chairman and CEO of Backbone, “This course was an overwhelming success and is the first of many we anticipate teaching in Turkey next year and possibly other countries in the region.”