Abstract:Adversarial embedding, which can deceive the CNN-based steganalyzers, has emerged as an effective strategy to improve image steganography security. However, its efficacy might be easily weakened when confronting re-trained or unknown steganalyzers. In this work, the security of adversarial embedding-based image steganography is further improved by ensemble steganalysis and adversarial perturbation minimization. Different from the existing works that rely on a single targeted steganalyzer, the proposed approach develops an ensemble steganographic classifier, which leverages the majority voting rule to smartly select those pixels that are more suitable for adversarial embedding. To mitigate the interference caused by adversarial embedding, two strategies are adopted. Firstly, a cover image is divided into two non-overlapping regions in terms of pixel gradient amplitude. The regions with higher gradient amplitudes are progressively conducted with adversarial embedding until the targeted steganalyzer is effectively deceived. Secondly, the embedding costs are fine-tuned to minimize the degradation of image quality. Extensive experimental results demonstrate that the proposed approach achieves superior steganography security. Under black-box attacks, with S-UNIWARD and HILL as baseline methods and Deng-Net as the targeted steganalyzer, the proposed approach improves the average detection accuracy of 4.88% and 2.47% for S-UNIWARD and HILL, respectively. In comparison, the existing works only achieve improvements of 2.88% and 2.93% for S-UNIWARD, and 1.44% and 1.12% for HILL, respectively.

Breaking CNN-Based Steganalysis.

A New Steganalysis Approach Based on Both Complexity Estimate and Statistical Filter

A Dct-Based Image Steganographic Method Resisting Statistical Attacks

Steganalysis of model based steganography and steghide in grayscale JPEG images

Breaking Steganography

Robustness enhancement against adversarial steganography via steganalyzer outputs?

Patch Steganalysis: A Sampling Based Defense Against Adversarial Steganography.

Preemptive Image Protection against Steganography

A Novel Technique for Image Steganalysis Based on Separable Convolution and Adversarial Mechanism

CNN Based Adversarial Embedding with Minimum Alteration for Image Steganography

Adversarial Examples Against Deep Neural Network based Steganalysis.

Adversarial Steganography Based on Sparse Cover Enhancement.

Direct Adversarial Attack on Stego Sandwiched Between Black Boxes

CNN-Assisted Steganography -- Integrating Machine Learning with Established Steganographic Techniques

TS-CNN: Text Steganalysis from Semantic Space Based on Convolutional Neural Network

Deep residual learning for image steganalysis

Highly Accurate End-to-end Image Steganalysis Based on Auxiliary Information and Attention Mechanism

A Siamese CNN for Image Steganalysis

Deeply‐Recursive Attention Network for Video Steganography

Improving image steganography security via ensemble steganalysis and adversarial perturbation minimization

Structural Design of Convolutional Neural Networks for Steganalysis