Identification of Steganography Software Based on Core Instructions Template Matching

In this paper, based on the principles of LSB Replacement Steganography algorithm, we propose an approach to identify steganography software by Core Instructions Template Matching. First, we take the process of operations to the pixels in the LSB Replacement steganography algorithm as Core Instructions, and we have analyzed the implementation of Core Instructions in a variety of typical steganography software based on LSB Replacement Steganography algorithm, build the corresponding template for each of implementations. And then we determine whether the software is a LSB replacement steganography software according to the existence of codes matched with the Core Instructions Template. The experimental results show that this method can identify some of the steganography software based on the LSB Replacement Steganography algorithm.