Security of Scalable Multimedia Streams - Revision history

Aah10 at 00:10, 31 August 2010

2010-08-31T00:10:03Z

Aah10 at 00:09, 31 August 2010

2010-08-31T00:09:06Z

Mhefeeda at 21:30, 2 December 2009

2009-12-02T21:30:51Z

Kianoosh at 00:57, 2 July 2009

2009-07-02T00:57:04Z

Kianoosh at 06:05, 23 June 2009

2009-06-23T06:05:30Z

Kianoosh at 00:41, 10 June 2009

2009-06-10T00:41:24Z

Kianoosh at 20:04, 11 March 2009

2009-03-11T20:04:17Z

Kianoosh at 20:26, 30 September 2008

2008-09-30T20:26:54Z

Kianoosh at 19:28, 27 August 2008

2008-08-27T19:28:36Z

Kianoosh at 19:25, 27 August 2008

2008-08-27T19:25:45Z

← Older revision		Revision as of 00:10, 31 August 2010
Line 18:		Line 18:
	* M. Hefeeda and K. Mokhtarian, [http://www.cs.sfu.ca/~mhefeeda/Papers/pv09.pdf Analysis of Authentication Schemes for Nonscalable Video Streams], In Proc. of IEEE International Packet Video Workshop (PV'09), 10 pages, Seattle, WA, May 2009. Slides [ [http://www.cs.sfu.ca/~mhefeeda/Talks/pv09.pptx ppt] ] [ [http://www.cs.sfu.ca/~mhefeeda/Talks/pv09.pdf pdf] ]		* M. Hefeeda and K. Mokhtarian, [http://www.cs.sfu.ca/~mhefeeda/Papers/pv09.pdf Analysis of Authentication Schemes for Nonscalable Video Streams], In Proc. of IEEE International Packet Video Workshop (PV'09), 10 pages, Seattle, WA, May 2009. Slides [ [http://www.cs.sfu.ca/~mhefeeda/Talks/pv09.pptx ppt] ] [ [http://www.cs.sfu.ca/~mhefeeda/Talks/pv09.pdf pdf] ]

−	* M. Hefeeda and K. Mokhtarian, '''Authentication of Scalable Multimedia Streams''', Book Chapter in Handbook on Security and Networks, World Scientific Publishing Co., To appear in ~~2010~~.	+	* M. Hefeeda and K. Mokhtarian, '''Authentication of Scalable Multimedia Streams''', Book Chapter in ''Handbook on Security and Networks'', World Scientific Publishing Co., To appear in 2011.
−

@@ Line 12: / Line 12: @@
 == Publications ==
-* M. Hefeeda and K. Mokhtarian, [http://www.cs.sfu.ca/~mhefeeda/Papers/tomccap09_auth.pdf Authentication Schemes for Multimedia Streams: Quantitative Analysis and Comparison], ''ACM Transactions on Multimedia Computing, Communications, and Applications'', Accepted January 2009.
+* M. Hefeeda and K. Mokhtarian, [http://www.cs.sfu.ca/~mhefeeda/Papers/tomccap10_auth.pdf Authentication Schemes for Multimedia Streams: Quantitative Analysis and Comparison], ''ACM Transactions on Multimedia Computing, Communications'', and Applications, 6(1), Article 6, pp. 1--24, February 2010.
 * K. Mokhtarian and M. Hefeeda, [http://www.cs.sfu.ca/~mhefeeda/Papers/nossdav09.pdf End-to-End Secure Delivery of Scalable Video Streams], In Proc. of International workshop on Network and Operating Systems Support for Digital Audio and Video (NOSSDAV'09), pages 79-84, Williamsburg, VA, June 2009.

@@ Line 12: / Line 12: @@
 == Publications ==
-* M. Hefeeda and K. Mokhtarian, Authentication Schemes for Multimedia Streams: Quantitative Analysis and Comparison, ''ACM Transactions on Multimedia Computing, Communications, and Applications'', Accepted January 2009.
+* M. Hefeeda and K. Mokhtarian, [http://www.cs.sfu.ca/~mhefeeda/Papers/tomccap09_auth.pdf Authentication Schemes for Multimedia Streams: Quantitative Analysis and Comparison], ''ACM Transactions on Multimedia Computing, Communications, and Applications'', Accepted January 2009.
-* K. Mokhtarian and M. Hefeeda,  End-to-End Secure Delivery of Scalable Video Streams, In Proc. of International workshop on Network and Operating Systems Support for Digital Audio and Video (NOSSDAV'09), pages 79-84, Williamsburg, VA, June 2009.
+* K. Mokhtarian and M. Hefeeda, [http://www.cs.sfu.ca/~mhefeeda/Papers/nossdav09.pdf End-to-End Secure Delivery of Scalable Video Streams], In Proc. of International workshop on Network and Operating Systems Support for Digital Audio and Video (NOSSDAV'09), pages 79-84, Williamsburg, VA, June 2009.
 * M. Hefeeda and K. Mokhtarian, [http://www.cs.sfu.ca/~mhefeeda/Papers/pv09.pdf Analysis of Authentication Schemes for Nonscalable Video Streams], In Proc. of IEEE International Packet Video Workshop (PV'09), 10 pages, Seattle, WA, May 2009.  Slides [ [http://www.cs.sfu.ca/~mhefeeda/Talks/pv09.pptx ppt] ] [ [http://www.cs.sfu.ca/~mhefeeda/Talks/pv09.pdf pdf] ]
-* M. Hefeeda and K. Mokhtarian, Authentication of Scalable Multimedia Streams, Book Chapter in Handbook on Security and Networks, World Scientific Publishing Co., To appear in Summer 2009.
+* M. Hefeeda and K. Mokhtarian, '''Authentication of Scalable Multimedia Streams''', Book Chapter in Handbook on Security and Networks, World Scientific Publishing Co., To appear in 2010.
@@ Line 32: / Line 32: @@
 * [http://www.cs.sfu.ca/~mhefeeda/ Mohamed Hefeeda] (Assistant Professor)
-* [http://www.cs.sfu.ca/~kma26/personal/ Kianoosh Mokhtarian] (MSc Student)
+* [http://www.cs.sfu.ca/~kma26/personal/ Kianoosh Mokhtarian] (MSc Student, Graduated Fall 2009)

@@ Line 1: / Line 1: @@
 The demand for multimedia services has been rapidly increasing over the past few years. More and more users rely on multimedia services for many aspects of their daily lives, including work, education, and entertainment. Multimedia content, however, is often distributed over open and insecure networks, such as the Internet. Accordingly, secure delivery of multimedia streams is an important and critical problem. Secure delivery means authenticating multimedia streams so that all receivers can ensure that the content is original and is not tampered with by any attacker.
@@ Line 6: / Line 8: @@
 other entity involved in the delivery process do not have to understand our authentication scheme, which is an important advantage of the proposed scheme.
@@ Line 18: / Line 14: @@
 * M. Hefeeda and K. Mokhtarian, Authentication Schemes for Multimedia Streams: Quantitative Analysis and Comparison, ''ACM Transactions on Multimedia Computing, Communications, and Applications'', Accepted January 2009.
-* K. Mokhtarian and M. Hefeeda,  End-to-End Secure Delivery of Scalable Video Streams, In Proc. of International workshop on Network and Operating Systems Support for Digital Audio and Video (NOSSDAV'09), 6 pages, Williamsburg, VA, June 2009.
+* K. Mokhtarian and M. Hefeeda,  End-to-End Secure Delivery of Scalable Video Streams, In Proc. of International workshop on Network and Operating Systems Support for Digital Audio and Video (NOSSDAV'09), pages 79-84, Williamsburg, VA, June 2009.
 * M. Hefeeda and K. Mokhtarian, [http://www.cs.sfu.ca/~mhefeeda/Papers/pv09.pdf Analysis of Authentication Schemes for Nonscalable Video Streams], In Proc. of IEEE International Packet Video Workshop (PV'09), 10 pages, Seattle, WA, May 2009.  Slides [ [http://www.cs.sfu.ca/~mhefeeda/Talks/pv09.pptx ppt] ] [ [http://www.cs.sfu.ca/~mhefeeda/Talks/pv09.pdf pdf] ]
 * M. Hefeeda and K. Mokhtarian, Authentication of Scalable Multimedia Streams, Book Chapter in Handbook on Security and Networks, World Scientific Publishing Co., To appear in Summer 2009.
 == Software ==
-* '''[[svcAuth]]''': A Library for Authenticating H.264/SVC Video Streams

@@ Line 1: / Line 1: @@
-The demand for multimedia services has been rapidly increasing over the past few years. More and more users rely on multimedia services for many aspects of their daily lives, including work, education, and entertainment. This makes the security of delivering multimedia content of great importance. Therefore, we focus on providing source authentication and data integrity services for media stream, i.e., ensuring that streams being played by receivers are original and have not been tampered with by malicious attackers. Our especial focus is on scalable video streams, which are becoming very popular with respect to recent advances in scalable coding and the increasing heterogeneity among receiver devices.
+The demand for multimedia services has been rapidly increasing over the past few years. More and more users rely on multimedia services for many aspects of their daily lives, including work, education, and entertainment. Multimedia content, however, is often distributed over open and insecure networks, such as the Internet. Accordingly, secure delivery of multimedia streams is an important and critical problem. Secure delivery means authenticating multimedia streams so that all receivers can ensure that the content is original and is not tampered with by any attacker.
-A number of major challenges rise when considering authentication of scalable video streams. First, digital signature operations, which are the foundation of authentication processes, are too computationally expensive to be performed frequently in real-time, especially by limited-capability devices such as cell phones and PDAs. Second, flexibility of scalable videos needs to be supported by the authentication scheme. A scalable video is encoded and signed once, and there can be many valid substreams extractable from one bitstream, each of which needs to be authenticated. Third, packet losses frequently take place in transmission networks, especially in wireless channels. Counteracting the impact of loss in video transmission scenarios is approached by several techniques such as Forward Error Correction (FEC), interleaved packetization, etc. This impact in case of "authenticated" video gets more highlighted. Due to the dependency that the authentication mechanism may impose on video packets, it may amplify the loss ratio of the network; a video packet and its authentication information must both be successfully received, or the video packet is unusable even though it is not lost. The authentication scheme should have zero or negligible such effect. Fourth, some additional information needs to be attached to the stream by the authentication mechanism in order for receivers to be able to verify the stream. The amount of this information needs to be carefully controlled, since bandwidth is a limited resource and should not be non-negligibly occupied by the authentication information.
+Various challenges need to be dealt with for this purpose. First, the authentication mechanism, which can be computationally expensive, has to keep up with the online nature of the streams. Second, media content is often distributed over unreliable channels, where packet losses are not uncommon. The authentication scheme needs to function properly even in the presence of these losses. Third, media streams can be encoded in scalable (or layered) manner to accommodate heterogeneous clients and varying network conditions. In this case, the authentication scheme has to successfully verify any substream extracted from the original stream. Finally, the authentication information added to the streams should be minimized in order to avoid increasing the already-high storage and network bandwidth requirements for multimedia content.
-We are investigating the above four challenges and several other subtle issues for authentication of scalable video streams in a computationally efficient manner, with low delay and communication overhead and high resilience to packet losses. We also performed systematic tamperings with scalable videos with very limited manipulation possibilities in order to highlight the importance of our approaches. Our main focus is on recent scalable video structures, such as the state-of-the-art H.264/SVC standard, which follow a more complex structure compared to traditional simple scalable videos, and can flexibly support different types of scalability by using various coding tools.
+We investigate these challenges for authentication of scalable video streams in a computationally efficient manner, with low delay and communication overhead, and high resilience against packet losses. Our main focus is on scalable videos encoded using the state-of-the-art video coding standard H.264/SVC, the Scalable Video Coding (SVC) extension of H.264/AVC video coding technique. H.264/SVC offers great flexibiliy while incurring much lower overheads compared to classic scalable coding techniques. We have designed an authentication scheme for H.264/SVC streams that supports its full flexibility: it takes into account the coding characteristics of H.264/SVC scalability model and enables verification of all possible substreams. In addition, the proposed scheme is designed for end-to-end authentication of streams. In an end-to-end authentication procedure, a content provider prepares the authenticated video and sends it to receivers, possibly through a third-party Content Delivery Network (CDN) with proxy servers that may need to adapt the flexible video streams. These proxies or any
@@ Line 15: / Line 16: @@
 == Publications ==
-* M. Hefeeda and K. Mokhtarian, “Authentication Schemes for Multimedia Streams: Quantitative Analysis and Comparison,” To appear in ACM Transactions on Multimedia Computing, Communications and Applications.
+* M. Hefeeda and K. Mokhtarian, Authentication Schemes for Multimedia Streams: Quantitative Analysis and Comparison, ''ACM Transactions on Multimedia Computing, Communications, and Applications'', Accepted January 2009.
-* M. Hefeeda and K. Mokhtarian, “Security of Scalable Multimedia Streams,” Handbook on Security and Networks, World Scientific Publishing Co., To appear in summer 2009.
+* K. Mokhtarian and M. Hefeeda,  End-to-End Secure Delivery of Scalable Video Streams, In Proc. of International workshop on Network and Operating Systems Support for Digital Audio and Video (NOSSDAV'09), 6 pages, Williamsburg, VA, June 2009.
@@ Line 23: / Line 28: @@
-* '''[[svcAuth]]''': An Authentication Scheme for Securing the Delivery of H.264/SVC Video Streams
+* '''[[svcAuth]]''': A Library for Authenticating H.264/SVC Video Streams

← Older revision		Revision as of 00:41, 10 June 2009
Line 18:		Line 18:

	* M. Hefeeda and K. Mokhtarian, “Security of Scalable Multimedia Streams,” Handbook on Security and Networks, World Scientific Publishing Co., To appear in summer 2009.		* M. Hefeeda and K. Mokhtarian, “Security of Scalable Multimedia Streams,” Handbook on Security and Networks, World Scientific Publishing Co., To appear in summer 2009.
		+
		+
		+	== Software ==
		+
		+
		+	* '''[[svcAuth]]''': An Authentication Scheme for Securing the Delivery of H.264/SVC Video Streams

@@ Line 1: / Line 1: @@
 The demand for multimedia services has been rapidly increasing over the past few years. More and more users rely on multimedia services for many aspects of their daily lives, including work, education, and entertainment. This makes the security of delivering multimedia content of great importance. Therefore, we focus on providing source authentication and data integrity services for media stream, i.e., ensuring that streams being played by receivers are original and have not been tampered with by malicious attackers. Our especial focus is on scalable video streams, which are becoming very popular with respect to recent advances in scalable coding and the increasing heterogeneity among receiver devices.
-The typical approach for authentication of messages is the use of digital signatures. Accordingly, a naive solution for authenticating a stream may be to sign every packet. This clearly does not work in practice due to its high computational cost that is not affordable especially by receiver devices with limited capabilities. In addition to the real-time nature of the streams, the next major challenge for authentication of scalable video streams is their flexibility. The video is encoded and signed once, and there can be many valid substreams extractable from one bitstream, each of which needs to be authenticated. Furthermore, the third important issue is tolerating losses that frequently take place in transmissions, especially in wireless channels. Counteracting the impact of loss in video transmission scenarios is approached by several techniques such as Forward Error Correction (FEC), interleaved packetization, etc. This impact in case of "authenticated" video gets more highlighted due to the dependency the authentication scheme imposes on video packets, i.e., a video packet and its authentication information must both be successfully received, or the video packet is unusable.
+The typical approach for authentication of messages is the use of digital signatures. Accordingly, a naive solution for authenticating a stream may be to sign every packet. This clearly does not work in practice due to its high computational cost that is not affordable especially by receiver devices with limited capabilities. In addition to the real-time nature of the streams, a major challenge for authentication of scalable video streams is their flexibility. The video is encoded and signed once, and there can be many valid substreams extractable from one bitstream, each of which needs to be authenticated. The third important issue is tolerating losses that frequently take place in transmissions, especially in wireless channels. Counteracting the impact of loss in video transmission scenarios is approached by several techniques such as Forward Error Correction (FEC), interleaved packetization, etc. This impact in case of "authenticated" video gets more highlighted due to the dependency the authentication scheme imposes on video packets, i.e., a video packet and its authentication information must both be successfully received, or the video packet is unusable.
 We are investigating the above three challenges and several other subtle issues for authentication of scalable video streams in an efficient manner, with low communication overhead, and without limiting the flexibility of the stream. We also performed systematic tamperings with scalable videos to justify our approaches. Our main focus is on the recent and well favored scalable video structure H.264/SVC.
@@ Line 13: / Line 13: @@
-== Code ==
+== Resources ==
-* Will be released soon.
+* Sample codes and tampering results will be released soon.

← Older revision		Revision as of 19:25, 27 August 2008
Line 15:		Line 15:
	== Code ==		== Code ==

−	Will be released soon.	+	* Will be released soon.