IDENTIFYING DATA 2014_15
Subject (*) MULTIMEDIA SECURITY Code 17665211
Study programme
Computer Engineering: Computer Security and Intelligent Systems (2013)
Cycle 2nd
Descriptors Credits Type Year Period
4.5 Optional 1Q
Language
Anglès
Department Enginyeria Informàtica i Matemàtiques
Coordinator
CASTELLÀ ROCA, JORDI
E-mail jordi.castella@urv.cat
Lecturers
CASTELLÀ ROCA, JORDI
Web http://moodle.urv.cat
General description and relevant information The course of Multimedia Security describes briefly the multimedia contents, the industry and the threats, i.e. the problem of copyright protection in the Information Society. Digital contents or applications can be copied and distributed via communication networks at low cost (without cost). This damages the owners of these goods because a high number of users can access the contents or programs without compensating its rightful owner. This problem has been approached from two different viewpoints, but complementary; copy prevention and copy detection (illegal copy). The copy prevention includes technologies that do not allow accessing to content or applications to unauthorized users. Authorized users are those who have purchased a legitimate copy of the product (or the access to the product). The copy detection comprises the technologies allow to know who is the legitimate user (watermarking) or even prove who has redistributed the copy (Fingerprinting). In both cases, we must find the copy.

Competences
Type A Code Competences Specific
 A1 Project, calculate and design products, processes and installations in all areas of computer engineering.
 A3 Perform mathematical modelling, calculation and simulation in company technology and engineering centres, particularly in tasks of research, development and innovation in all areas related to computer engineering.
 D1 Integrate the fundamental technology, applications, services and systems of computer engineering, in general, and in a broader, multidisciplinary context.
 T4 Design, develop, manage and evaluate mechanisms to certify and guarantee security in handling information and access to it in a local or distributed processing system.
Type B Code Competences Transversal
 B2 Aplicar el pensament crític, lògic i creatiu, demostrant capacitat d’innovació.
 B3 Treballar de forma autònoma amb responsabilitat i iniciativa.
Type C Code Competences Nuclear
 C2 Be advanced users of the information and communication technologies
 C3 Be able to manage information and knowledge
 C5 Be committed to ethics and social responsibility as citizens and professionals

Learning outcomes
Type A Code Learning outcomes
 A1 Integrate theoretical knowledge into the realities to which it may apply.
 A3 Apply the techniques learned in a specific context.
 D1 Analyse the problems and their causes from a global focus in the medium and long term.
 T4 Design systems that allows the securing, conditional access and detection of illegal distribution of multimedia content.
Type B Code Learning outcomes
 B2 Identify things that need to be improved in complex situations and contexts.
Apply innovative techniques and obtain results.
 B3 Take correct decisions at key moments confidently, consistently and systematically.
Type C Code Learning outcomes
 C2 Understand the operating system as a hardware manager and the software as a working tool.
 C3 Locate and access information effectively and efficiently.
 C5 Respect fundamental rights and equality between men and women.

Contents
Topic Sub-topic
Introduction 1-Definition
2-Multimedia contents
3-Multimedia industry
4-Devices and systems
5-Threats
Copyright 1-Definition
2-History
3-Protection
4-Works protected
5-Rights
6-Infringiment
7-Copyleft
8-Creative Commons
9-Software licenses
10-Laws
11-Technologies
Digital Rights Management (DRM) 1-Definition
2-Basic structure of a DRM system
3-Copy prevention
4-Copy detection
5-Examples of DRM
Copy prevention 1-Multimedia encryption
1.1-Confidentiality of multimedia content
1.2-Access control
1.3-Cryptographic toolbox
1.4-The multimedia encryption paradigm
1.5-Multimedia encryption schemes
2-Key management for multimedia access and distribution
2.1-Conditional access systems: satellite, cable and terrestrial distribution
2.2-Examples
2.2.1-DVB
2.2.2-VoIP
2.2.3-Skype
3-Broadcast encryption
3.1-Introduction
3.2-Toy example
3.3-Practical examples
Copy detection 1-Introduction
2-Steganography
2.1-Introduction
2.2-Properties of steganography schemes
2.3-Types of steganographic protocols
2.4-Steganography methods
2.4.1-Preliminary methods
2.4.2-Substitution systems and bitplane tools
2.4.3-Transform domain techniques
2.4.4-Spread spectrum and information hiding
2.4.5-Statistical steganography
2.4.6-Distortion techniques
2.4.7-Cover generation techniques
3-Steganalysis
4-Watermarking
4.1-Introduction
4.2-History
4.3-Watermarking terminology
4.4-Properties of watermarking schemes
4.5-Classification of watermarking applications
4.6-Watermarking applications
4.7-Methods
5-Fingerprinting
5.1-Introduction
5.2-Terminology
5.3-Examples of fingerprinting
5.4-Properties
5.5-Fingerprinting schemes
5.5.1-Collusion secure fingerprinting
5.5.2-Traitor tracing

Planning
Methodologies  ::  Tests
  Competences (*) Class hours
Hours outside the classroom
(**) Total hours
Introductory activities
2 0.5 2.5
Lecture
A1
A3
B2
C3
C5
22 33 55
Practicals using information and communication technologies (ICTs) in computer rooms
A1
A3
D1
T4
B2
C2
C3
C5
14 21 35
Personal tuition
1 0 1
 
Objective short-answer tests
A1
A3
T4
B2
B3
C3
C5
2 4 6
Extended-answer tests
A1
A3
T4
B2
B3
C3
C5
4 9 13
 
(*) On e-learning, hours of virtual attendance of the teacher.
(**) The information in the planning table is for guidance only and does not take into account the heterogeneity of the students.

Methodologies
Methodologies
  Description
Introductory activities The first session introduces the subject, describing the objectives, schedule, and how the course will be assessed.
Lecture The teacher explains the units of the course.
Practicals using information and communication technologies (ICTs) in computer rooms The students have to develop a copy detection technique.

The practice will be done in groups of two.

The students will present their works in class. All works (techniques developed) compete between them. The best work obtains the best grade.
Personal tuition Practicals using information and communication technologies (ICTs) in computer rooms:

The students can ask questions related with the subject to the teacher. They can do their questions in class, to his office in office hours, through email, or Moodle.

Lecture:

The students can ask questions related with the subject to the teacher. They can do their questions in class, to his office in office hours, through email, or Moodle.

Personalized attention
Description
Practicals using information and communication technologies (ICTs) in computer rooms: The students can ask questions related with the subject to the teacher. They can do their questions in class, to his office in office hours, through email, or Moodle. Lecture: The students can ask questions related with the subject to the teacher. They can do their questions in class, to his office in office hours, through email, or Moodle. The students can be attended out of office hours if they previously agree a meeting with the teacher.

Assessment
Methodologies Competences Description Weight        
Practicals using information and communication technologies (ICTs) in computer rooms
A1
A3
D1
T4
B2
C2
C3
C5
The students have to develop a copy detection technique.

The practice can be performed individually or in a group of two students.

The students will present their works in class. All works (techniques developed) compete between them. The best work obtains the best grade.
30
Objective short-answer tests
A1
A3
T4
B2
B3
C3
C5
The students have to conduct a written test of the units 1 and 2.

Passing this test is required to pass the course.
10
Extended-answer tests
A1
A3
T4
B2
B3
C3
C5
There are two written test.

The first test comprises the units 3 and 4.

The second test comprises the unit 5.

Both written tests have the same weight, i.e. a 30% each of them.

Passing both tests is required to pass the course.
60
Others  
 
Other comments and second exam session

Students who do not pass the subject in the continuous assessment have to carry out a examination on the second call, and deliver the practice. The exam will consist of three parts, corresponding to the three parts of the course (first part: units 1 and 2 - second part: units  3 and 4 - third part: unit 5). Each part is scored out of 10 points. The students have to obtain at least 4 in each of the parts to pass the examination, and the sum of the three parts must be greater than 15 points. The practice must have a minimum of five to pass the course. Otherwise, the students can no pass the course.

Students may not bring any electronic devices on the written tests.


Sources of information

Basic William Rosenblatt, Digital Rights Management: Business and Technology, Hungry Minds Inc,U.S., 2002
Jessica Litman, Digital Copyright: Protecting Intellectual Property on the Internet, Prometheus Books , 2000
Stefan Katzenbeisser, Fabien A. P. Petitcolas, Information Hiding techniques for steganography and digital watermarking, Artech House , 2000
Ingemar Cox, Matthew Miller, Jeffrey Bloom and Jessica Fridrich, Digital Watermarking and Steganographt, Morgan Kaufmann, 2007
Mauro Barni and Franco Bartolini, Watermarking Systems Engineering: Enabling Digital Assets Security and Other Applications, Dekker, 2007
James F. Ransome and John R. Rittinghouse, Voice over Internet Protocol (VoIP) Security, Digital Press, 2004
Rainer Böhme, Advanced Statistical Steganalysis , Springer, 2010
Anjan Kumar Payra, Steganology for the Computer Forensics Examiners: Steganography,Steganalysis,Sterilization techniques for security issues, LAP LAMBERT Academic Publishing, 2013

Complementary

Recommendations


Subjects that it is recommended to have taken before
CRYPTOLOGY AND INFORMATION SECURITY/17665108
PRIVACY PROTECTION/17665206
(*)The teaching guide is the document in which the URV publishes the information about all its courses. It is a public document and cannot be modified. Only in exceptional cases can it be revised by the competent agent or duly revised so that it is in line with current legislation.