IDENTIFYING DATA 2020_21
Subject (*) MULTIMEDIA SECURITY Code 17685207
Study programme
Computer Security Engineering and Artificial Intelligence (2016)
Cycle 2nd
Descriptors Credits Type Year Period
3 Optional 2Q
Language
Anglès
Department Computer Engineering and Mathematics
Coordinator
PÀMIES ESTREMS, DAVID
E-mail alberto.blanco@urv.cat
david.pamies@urv.cat
Lecturers
BLANCO JUSTICIA, ALBERTO
PÀMIES ESTREMS, DAVID
Web http://moodle.urv.cat
General description and relevant information <p>The information published in this guide corresponds to face-to-face classes and can serve as a guide. Due to the health emergency caused by COVID-19 there may be changes in teaching, assessment and calendars for the 2020-21 academic year. These changes will be reported in the Moodle space of each subject.</p><p>GENERAL DESCRIPTION OF THE SUBJECT:: In this subject, the theoretical classes will be mixed scheduled lectures; that is to say, some of the students will attend in person in the classroom and others will simultaneously follow the class by video conference. As far as practical classes are concerned, some of the laboratory sessions will be done online. Multimedia Security deals with the protection of copyright and other related rights in the digital era.</p><div><br /></div><div>The course begins describing and characterizing multimedia contents, the related industry, and the associated threats, i.e. the problem of copyright protection in the Information Society. Then, we introduce the legal framework supporting Intellectual Property rights, Industrial Property rights, Copyright, and, as a related issue, Software Licenses. After the rights of the authors of multimedia content have been described, we will introduce Digital Rights Management tools, which are a collection of information security tools to manage the access rights to multimedia content. DRM tools can be categorized in two broad categories: copy protection tools and copy detection tools. - Copy protection tools include technologies that do not allow accessing to content or applications to unauthorized users. Authorized users are those who have purchased a legitimate copy of the product (or the access to the product). As a special case, we will explore protection tools specific to software and videogames. - Copy detection tools comprise the technologies that allow content distributors to identify illegally distributed content (multimedia fingerprinting) and to know who the legitimate owner of the content is (watermarking). </div>

Competences
Type A Code Competences Specific
 A1 Integrate the fundamental technology, applications, services and systems of Computer Security and Artificial Intelligence,in a broader, multidisciplinary context.
 A4 Design, develop, manage and evaluate mechanisms to certify and guarantee security in handling information and access to it in a local or distributed processing system.
 G1 Project, calculate and design products, processes and installations in the areas of Computer Security and Artificial Intelligence
 G2 Perform mathematical modelling, calculation and simulation in company technology and engineering centres, particularly in tasks of research, development and innovation in the areas of Computer Security and Artificial Intelligence
Type B Code Competences Transversal
 CT2 Forming opinions on the basis of the efficient management and use of information
 CT3 Solve complex problems critically, creatively and innovatively in multidisciplinary contexts.
 CT4 Work in multidisciplinary teams and in complex contexts.
 CT5 Communicate complex ideas effectively to all sorts of audiences
 CT7 Apply ethical principles and social responsibility as a citizen and a professional.
Type C Code Competences Nuclear

Learning outcomes
Type A Code Learning outcomes
 A1 Analyse the problems and their causes from a global focus in the medium and long term.
 A4 Design systems that allows the securing, conditional access and detection of illegal distribution of multimedia content.
 G1 Integrate theoretical knowledge into the realities to which it may apply.
 G2 Apply the techniques learned in a specific context.
Type B Code Learning outcomes
 CT2 Master the tools for managing their own identity and activities in a digital environment.
Search for and find information autonomously using criteria of importance, reliability and relevance, which is useful for creating knowledge
Organise information with appropriate tools (online and face-to-face) so that it can be updated, retrieved and processed for re-use in future projects.
Produce information with tools and formats appropriate to the communicative situation and with complete honesty.
Use IT to share and exchange the results of academic and scientific projects in interdisciplinary contexts that seek knowledge transfer.
 CT3 Recognise the situation as a problem in a multidisciplinary, research or professional environment, and take an active part in finding a solution.
Follow a systematic method with an overall approach to divide a complex problem into parts and identify the causes by applying scientific and professional knowledge.
Design a new solution by using all the resources necessary and available to cope with the problem.
Draw up a realistic model that specifies all the aspects of the solution proposed.
Assess the model proposed by contrasting it with the real context of application, find shortcomings and suggest improvements.
 CT4 Understand the team’s objective and identify their role in complex contexts.
Communicate and work with other teams to achieve joint objectives.
Commit and encourage the necessary changes and improvements so that the team can achieve its objectives.
 CT5 Produce quality texts that have no grammatical or spelling errors, are properly structured and make appropriate and consistent use of formal and bibliographic conventions
Draw up texts that are structured, clear, cohesive, rich and of the appropriate length, and which can transmit complex ideas.
Draw up texts that are appropriate to the communicative situation, consistent and persuasive.
Use the techniques of non-verbal communication and the expressive resources of the voice to make a good oral presentation.
Construct a discourse that is structured, clear, cohesive, rich and of the appropriate length, and which can transmit complex ideas.
Produce a persuasive, consistent and precise discourse that can explain complex ideas and effectively interact with the audience.
 CT7 Be aware of gender and other inequalities in their activity as a URV student.
Analyse the major environmental problems from the perspective of their field of expertise in their student and/or professional activity.
Be able to give arguments based on social values and make proposals for the improvement of the community.
Be personally and professionally committed to applying the ethical and deontological concepts of their field of expertise.
Type C Code Learning outcomes

Contents
Topic Sub-topic
Introduction 1-Definitions of Multimedia Content
2-Definitions of Information Security
3-Devices and systems
4-The Multimedia Industry
5-Threats
Intellectual Property, Copyright and Software Licenses 1-History of Intellectual Property Rights
2-Industrial Property
3-Copyright
3.1-Moral Rights
3.2-Economic Rights
4-Creative Commons
5-Software Licenses
Information Security and Digital Rights Management 1-General concepts of Information Security
2-Risk assessment
3-General protection mechanisms
4-Introduction to Digital Rights Management
4.1-Basic structure of a DRM system
5-Specific security requirements
6-Security tools and techniques used for DRM.
6.1-Copy prevention
6.2-Copy detection
Copy prevention 1-Cryptographic background
2-Multimedia encryption
2.1-Confidentiality of multimedia content
2.2-Access control
2.3-Cryptographic toolbox
2.4-The multimedia encryption paradigm
2.5-Multimedia encryption schemes
3-Broadcast encryption
3.1-Introduction
3.2-Toy example
3.3-Practical examples
4-DRM in Software and Videogames
4.1-Types of DRM in software and videogames
4.2-Software protection
Copy detection 1-Introduction
2-Steganography
2.1-Introduction
2.2-Properties of steganography schemes
2.3-Types of steganographic protocols
2.4-Steganography methods
2.4.1-Preliminary methods
2.4.2-Substitution systems and bitplane tools
2.4.3-Transform domain techniques
2.4.4-Spread spectrum and information hiding
2.4.5-Statistical steganography
2.4.6-Distortion techniques
2.4.7-Cover generation techniques
3-Steganalysis
4-Watermarking
4.1-Introduction
4.2-History
4.3-Watermarking terminology
4.4-Properties of watermarking schemes
4.5-Classification of watermarking applications
4.6-Watermarking applications
4.7-Methods

Planning
Methodologies  ::  Tests
  Competences (*) Class hours
Hours outside the classroom
(**) Total hours
Introductory activities
1 1.5 2.5
Lecture
A1
A4
G1
G2
CT2
14 21.5 35.5
IT-based practicals in computer rooms
A1
A4
G1
CT2
CT3
CT4
CT5
11 11 22
Personal attention
1 0 1
 
Short-answer objective tests
A1
A4
CT7
2 5 7
Extended-answer tests
A1
A4
G1
G2
CT2
CT3
2 5 7
 
(*) On e-learning, hours of virtual attendance of the teacher.
(**) The information in the planning table is for guidance only and does not take into account the heterogeneity of the students.

Methodologies
Methodologies
  Description
Introductory activities The first session introduces the subject, describing the objectives, schedule, and how the course will be assessed.
Lecture The teacher explains the units of the course.
IT-based practicals in computer rooms The students have to develop a DRM-protected video streaming service and a copy detection technique.

The first practical work is individual. The second practical work will be done in groups of two.

For the second practical work, if the health situation allows for it, the students will present their works in class. All works (techniques developed) compete between them. The best work obtains the best grade.
Personal attention Practicals using information and communication technologies (ICTs) in computer rooms:

The students can ask questions related with the subject to the teacher. They can do their questions in class, to his office in office hours, through email, or Moodle.

Lecture:

The students can ask questions related with the subject to the teacher. They can do their questions in class, to his office in office hours, through email, or Moodle. The students can be attended out of office hours either personally or through online meetings if they previously agree a meeting with the teacher.

Personalized attention
Description

Practicals using information and communication technologies (ICTs) in computer rooms: The students can ask questions related with the subject to the teacher. They can do their questions in class, to his office in office hours, through email, or Moodle. 

Lecture: The students can ask questions related with the subject to the teacher. They can do their questions in class, to his office in office hours, through email, or Moodle. 

The students can be attended out of office hours if they previously agree a meeting with the teacher.

Due to the health emergency, this attention can be carried out through online meetings, previously appointed by e-mail, or with other online tools.

Assessment
Methodologies Competences Description Weight        
IT-based practicals in computer rooms
A1
A4
G1
CT2
CT3
CT4
CT5
There are two practical works.

The first practical work consists on the development of a DRM-protected video streaming service. This practical work is carried out individually.

In the second practical work, the students have to develop a copy detection technique, in particular an audio fingerprinting service (similar to Shazam). This practical work can be performed individually or in groups of two students.

Additionally, for the second practical work, and if the health situation allows for it, the students will present their works in class. All works (techniques developed) compete between them. The best work obtains the best grade.
40
Short-answer objective tests
A1
A4
CT7
The students have to conduct a test via Moodel covering units 1 and 2.

A minimum score of 4 is required to pass the course.
10
Extended-answer tests
A1
A4
G1
G2
CT2
CT3
There is one written test that covers units 3, 4 and 5.

A minimum score of 4 in is required to pass the course.
50
Others  
 
Other comments and second exam session

Students who do not pass the subject in the continuous assessment have to carry out a examination on the second call, and deliver the practice. The exam will consist of three parts, corresponding to the three parts of the course (first part: units 1 and 2 - second part: units 3 and 4 - third part: unit 5). Each part is scored out of 10 points. The students have to obtain at least 4 in each of the parts to pass the examination, and the sum of the three parts must be greater than 15 points. The practice must have a minimum of five to pass the course. Otherwise, the students can not pass the course.

Students may not bring any electronic devices on the written tests.


Sources of information

Basic William Rosenblatt, Digital Rights Management: Business and Technology, Hungry Minds Inc,U.S., 2002
Jessica Litman, Digital Copyright: Protecting Intellectual Property on the Internet, Prometheus Books , 2000
Stefan Katzenbeisser, Fabien A. P. Petitcolas, Information Hiding techniques for steganography and digital watermarking, Artech House , 2000
Ingemar Cox, Matthew Miller, Jeffrey Bloom and Jessica Fridrich, Digital Watermarking and Steganographt, Morgan Kaufmann, 2007
Mauro Barni and Franco Bartolini, Watermarking Systems Engineering: Enabling Digital Assets Security and Other Applications, Dekker, 2007
Rainer Böhme, Advanced Statistical Steganalysis , Springer, 2010
Anjan Kumar Payra, Steganology for the Computer Forensics Examiners: Steganography,Steganalysis,Sterilization techniques for security issues, LAP LAMBERT Academic Publishing, 2013

Complementary

Recommendations

Subjects that are recommended to be taken simultaneously
PRIVACY PROTECTION/17685107

Subjects that it is recommended to have taken before
CRYPTOGRAPHY AND INFORMATION SECURITY/17685101
(*)The teaching guide is the document in which the URV publishes the information about all its courses. It is a public document and cannot be modified. Only in exceptional cases can it be revised by the competent agent or duly revised so that it is in line with current legislation.