Analysis And Application Of A Compressed File’s Format

From the beginning of the last century, computer network and information technology have developed in a high rapid, and the demand for information security is growing. Information hiding technology has become an important aspect of information security and get more and more attention. Correspondence with information the hiding technology, the information hiding detection technology is an attack technique, and also become an important research direction in the field of information security. Information hiding detection technology can not only prevent the illegal use of information hiding techniques, but also promote the development of information hiding technology. At the same time, it can As an important transmission document in the network, the compressed files become the main carrier of information hiding. Information Hiding and detection technology based on compressed files has also been extensively studied in recent years.This paper have been studied the information hiding information hiding and detection technologies based on compressed files, and implemented a system based on the RAR and ZIP. The main contents of the paper are: First, analyse the formats of RAR and ZIP files; the second is to study and implement information hiding detection technology based on the existing popular RAR and ZIP hidden methods; the third is to discuss and implement other functional modules of the system, including support for decompression functions, generate reports and evidence gathering to support field location search functions. The information hiding detection technology can determine whether there is a compressed file or embed hidden information, including the free bytes, the sensitive fields, the leaved fields, and other abnormalities.On this basis, this paper implements the hidden information detection system based on compessed files. The system can support up to 4GB, up to 1024 files to read, supports the ASCII, binary string search, support for file positioning function in any field. Though testing, the system can detect a good hiding information and exception information.