{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,12]],"date-time":"2026-09-12T19:09:04Z","timestamp":1789240144824,"version":"build-2803163510"},"publisher-location":"New York, NY, USA","reference-count":15,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,6,24]],"date-time":"2024-06-24T00:00:00Z","timestamp":1719187200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,6,24]]},"DOI":"10.1145\/3658664.3659641","type":"proceedings-article","created":{"date-parts":[[2024,6,12]],"date-time":"2024-06-12T15:09:27Z","timestamp":1718204967000},"page":"101-112","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":6,"title":["Forensic Trace Analysis for MP3 based Stego-Malware: Exemplary Study for Stego-Algorithm and Capacity Attribution to derive YARA Rules for Malware Identification"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0003-7985-8041","authenticated-orcid":false,"given":"Jana","family":"Dittmann","sequence":"first","affiliation":[{"name":"Dept. of Computer Science, Otto-von-Guericke-University, Magdeburg, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0138-4638","authenticated-orcid":false,"given":"Christian","family":"Kraetzer","sequence":"additional","affiliation":[{"name":"Dept. of Computer Science, Otto-von-Guericke-University, Magdeburg, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8644-239X","authenticated-orcid":false,"given":"Jost","family":"Alemann","sequence":"additional","affiliation":[{"name":"Dept. of Computer Science, Otto-von-Guericke-University, Magdeburg, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0002-8237-1149","authenticated-orcid":false,"given":"Bernhard","family":"Birnbaum","sequence":"additional","affiliation":[{"name":"Dept. of Computer Science, Otto-von-Guericke-University, Magdeburg, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2024,6,24]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"International Conference on Emerging Security Information, Systems and Technologies (SECURWARE 2023","author":"Birnbaum Bernhard","year":"2023","unstructured":"Bernhard Birnbaum, Christian Kraetzer, and Jana Dittmann. 2023. Stego-Malware Attribution: Simple Signature and Content-based Features Derived and Validated from Classical Image Steganalysis on Five Exemplary Chosen Algorithms. In 17. International Conference on Emerging Security Information, Systems and Technologies (SECURWARE 2023, Porto, Portugal, 25--29 September 2023). IARIA, 33--42."},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"crossref","unstructured":"Rajasekhar Chaganti Vinayakumar Ravi Mamoun Alazab and Tuan D. Pham. 2021. Stegomalware: A Systematic Survey of MalwareHiding and Detection in Images Machine LearningModels and Research Challenges. Technical Report. arxiv: 2110.02504 [cs.CR]","DOI":"10.36227\/techrxiv.16755457"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICITISEE48480.2019.9004022"},{"key":"e_1_3_2_1_4_1","unstructured":"ENFSI. 2022. Best Practice Manual for Digital Audio Authenticity Analysis. Technical Report FSA-BPM-002. European Network of Forensic Science Institutes (ENFSI) Wiesbaden Germany. https:\/\/enfsi.eu\/wp-content\/uploads\/2022\/12\/FSA-BPM-002_BPM-for-Digital-Audio-Authenticity-Analysis.pdf"},{"key":"e_1_3_2_1_5_1","unstructured":"ISO\/IEC. 1993. 11172--3:1993 - Coding of moving pictures and associated audio for digital storage media at up to about 1 5 Mbit\/s - Part 3: Audio. Technical Report. ISO\/IEC. https:\/\/www.iso.org\/standard\/22412.html"},{"key":"e_1_3_2_1_6_1","unstructured":"ISO\/IEC. 1998. 13818--3:1998 - Generic coding of moving pictures and associated audio information - Part 3: Audio. Technical Report. ISO\/IEC. https:\/\/www.iso.org\/standard\/26797.html"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"crossref","unstructured":"Stefan Katzenbeisser and Fabien A. Petitcolas (Eds.). 2000. Information Hiding Techniques for Steganography and Digital Watermarking 1st ed.). Artech House Inc. Norwood MA USA.","DOI":"10.1201\/1079\/43263.28.6.20001201\/30373.5"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"crossref","unstructured":"Rinu Kuriakose and P. Premalatha. 2015. A Novel Method for MP3 Steganalysis. In Intelligent Computing Communication and Devices Lakhmi C. Jain Srikanta Patnaik and Nikhil Ichalkaranje (Eds.). Springer India New Delhi 605--611.","DOI":"10.1007\/978-81-322-2012-1_65"},{"key":"e_1_3_2_1_9_1","unstructured":"MITRE. 2023. Obfuscated Files or Information (T1027). Technical Report. MITRE ATT&CK. https:\/\/attack.mitre.org\/techniques\/T1027\/"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN.2009.5178971"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.5555\/1981848.1981916"},{"key":"e_1_3_2_1_12_1","unstructured":"Anuj Soni Jordan Barth and Brian Marks. 2019. Malicious Payloads - Hiding Beneath the WAV. Technical Report. BlackBerry Blog. https:\/\/blogs.blackberry.com\/en\/2019\/10\/malicious-payloads-hiding-beneath-the-wav"},{"key":"e_1_3_2_1_13_1","unstructured":"VirusTotal. 2024. The pattern matching swiss knife for malware researchers. Technical Report. VirusTotal. https:\/\/virustotal.github.io\/yara\/"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2019.10.037"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"crossref","unstructured":"Andreas Westfeld. 2002. Detecting Low Embedding Rates. In Information Hiding.","DOI":"10.1007\/3-540-36415-3_21"}],"event":{"name":"IH&MMSEC '24: ACM Workshop on Information Hiding and Multimedia Security","location":"Baiona Spain","acronym":"IH&MMSEC '24","sponsor":["SIGMM ACM Special Interest Group on Multimedia"]},"container-title":["Proceedings of the 2024 ACM Workshop on Information Hiding and Multimedia Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3658664.3659641","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3658664.3659641","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T23:42:19Z","timestamp":1755906139000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3658664.3659641"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,6,24]]},"references-count":15,"alternative-id":["10.1145\/3658664.3659641","10.1145\/3658664"],"URL":"https:\/\/doi.org\/10.1145\/3658664.3659641","relation":{},"subject":[],"published":{"date-parts":[[2024,6,24]]},"assertion":[{"value":"2024-06-24","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}