Steganography: What's the real risk?

Since September 11, 2001, government officials have sought to change federal and state surveillance laws in order to allow the Federal Bureau of Investigations and the Central Intelligence Agency the ability to monitor suspected terrorist communications inside the United States. Typical monitoring practices include phone tapping, interception of mail, and both video and audio surveillance. With the age of the Internet, a whole host of new ways to communicate has arisen. Now law enforcement officials have to deal with communication as simple as email and as complex as triple-DES encrypted data streams.

Tags:

Read the complete paper at SANS