IDENTIFYING DATA 2016_17
Subject (*) MULTIMEDIA SECURITY Code 17685207
Study programme
Computer Security Engineering and Artificial Intelligence (2016)
Cycle 2nd
Descriptors Credits Type Year Period
3 Optional 2Q
Language
Anglès
Department Computer Engineering and Mathematics
Coordinator
SORIA COMAS, JORGE
E-mail jordi.castella@urv.cat
jordi.soria@urv.cat
Lecturers
CASTELLÀ ROCA, JORDI
SORIA COMAS, JORGE
Web http://moodle.urv.cat
General description and relevant information The course of Multimedia Security describes briefly the multimedia contents, the industry and the threats, i.e. the problem of copyright protection in the Information Society. Digital contents or applications can be copied and distributed via communication networks at low cost (without cost). This damages the owners of these goods because a high number of users can access the contents or programs without compensating its rightful owner. This problem has been approached from two different viewpoints, but complementary; copy prevention and copy detection (illegal copy). The copy prevention includes technologies that do not allow accessing to content or applications to unauthorized users. Authorized users are those who have purchased a legitimate copy of the product (or the access to the product). The copy detection comprises the technologies allow to know who is the legitimate user (watermarking) or even prove who has redistributed the copy (Fingerprinting). In both cases, we must find the copy.

Competences
Type A Code Competences Specific
 A1 Integrate the fundamental technology, applications, services and systems of Computer Security and Artificial Intelligence,in a broader, multidisciplinary context.
 A4 Design, develop, manage and evaluate mechanisms to certify and guarantee security in handling information and access to it in a local or distributed processing system.
 G1 Project, calculate and design products, processes and installations in the areas of Computer Security and Artificial Intelligence
 G2 Perform mathematical modelling, calculation and simulation in company technology and engineering centres, particularly in tasks of research, development and innovation in the areas of Computer Security and Artificial Intelligence
Type B Code Competences Transversal
 CT2 Formular valoracions a partir de la gestió i ús eficient de la informació.
 CT3 Resoldre problemes complexes de manera crítica, creativa i innovadora en contextos multidisciplinars.
 CT4 Treballar en equips multidisciplinars i en contextos complexes.
 CT5 Comunicar idees complexes de manera efectiva a tot tipus d’audiències.
 CT7 Aplicar els principis ètics i de responsabilitat social com a ciutadà i com a professional.
Type C Code Competences Nuclear

Learning outcomes
Type A Code Learning outcomes
 A1 Analitza els problemes i les seves causes des d'un enfocament global i de mitjà i llarg termini.
 A4 Dissenya sistemes que permetin la securització, l'accés condicional i la detecció de distribució il·legal de contingut multimèdia.
 G1 Integra els coneixements teòrics amb les realitats a les quals es poden aplicar.
 G2 Aplica les tècniques apreses en contextos concrets.
Type B Code Learning outcomes
 CT2 Formular valoracions a partir de la gestió i ús eficient de la informació.
 CT3 Resoldre problemes complexes de manera crítica, creativa i innovadora en contextos multidisciplinars.
 CT4 Treballar en equips multidisciplinars i en contextos complexes.
 CT5 Comunicar idees complexes de manera efectiva a tot tipus d’audiències.
 CT7 Aplicar els principis ètics i de responsabilitat social com a ciutadà i com a professional.
Type C Code Learning outcomes

Contents
Topic Sub-topic
Introduction 1-Definition
2-Multimedia contents
3-Multimedia industry
4-Devices and systems
5-Threats
Copyright 1-Definition
2-History
3-Protection
4-Works protected
5-Rights
6-Infringiment
7-Copyleft
8-Creative Commons
9-Software licenses
10-Laws
11-Technologies
Digital Rights Management (DRM) 1-Definition
2-Basic structure of a DRM system
3-Copy prevention
4-Copy detection
5-Examples of DRM
Copy prevention 1-Multimedia encryption
1.1-Confidentiality of multimedia content
1.2-Access control
1.3-Cryptographic toolbox
1.4-The multimedia encryption paradigm
1.5-Multimedia encryption schemes
2-Key management for multimedia access and distribution
2.1-Conditional access systems: satellite, cable and terrestrial distribution
2.2-Examples
2.2.1-DVB
2.2.2-VoIP
2.2.3-Skype
3-Broadcast encryption
3.1-Introduction
3.2-Toy example
3.3-Practical examples
Copy detection 1-Introduction
2-Steganography
2.1-Introduction
2.2-Properties of steganography schemes
2.3-Types of steganographic protocols
2.4-Steganography methods
2.4.1-Preliminary methods
2.4.2-Substitution systems and bitplane tools
2.4.3-Transform domain techniques
2.4.4-Spread spectrum and information hiding
2.4.5-Statistical steganography
2.4.6-Distortion techniques
2.4.7-Cover generation techniques
3-Steganalysis
4-Watermarking
4.1-Introduction
4.2-History
4.3-Watermarking terminology
4.4-Properties of watermarking schemes
4.5-Classification of watermarking applications
4.6-Watermarking applications
4.7-Methods
5-Fingerprinting
5.1-Introduction
5.2-Terminology
5.3-Examples of fingerprinting
5.4-Properties
5.5-Fingerprinting schemes
5.5.1-Collusion secure fingerprinting
5.5.2-Traitor tracing

Planning
Methodologies  ::  Tests
  Competences (*) Class hours
Hours outside the classroom
(**) Total hours
Introductory activities
1 1.5 2.5
Lecture
A1
A4
G1
G2
CT2
12 18.5 30.5
Practicals using information and communication technologies (ICTs) in computer rooms
A1
A4
G1
CT2
CT3
CT4
CT5
10 10 20
Personal tuition
1 0 1
 
Objective short-answer tests
A1
A4
CT7
2 5 7
Extended-answer tests
A1
A4
G1
G2
CT2
CT3
4 10 14
 
(*) On e-learning, hours of virtual attendance of the teacher.
(**) The information in the planning table is for guidance only and does not take into account the heterogeneity of the students.

Methodologies
Methodologies
  Description
Introductory activities The first session introduces the subject, describing the objectives, schedule, and how the course will be assessed.
Lecture The teacher explains the units of the course.
Practicals using information and communication technologies (ICTs) in computer rooms The students have to develop a copy detection technique.

The practice will be done in groups of two.

The students will present their works in class. All works (techniques developed) compete between them. The best work obtains the best grade.
Personal tuition Practicals using information and communication technologies (ICTs) in computer rooms:

The students can ask questions related with the subject to the teacher. They can do their questions in class, to his office in office hours, through email, or Moodle.

Lecture:

The students can ask questions related with the subject to the teacher. They can do their questions in class, to his office in office hours, through email, or Moodle.

Personalized attention
Description
Practicals using information and communication technologies (ICTs) in computer rooms: The students can ask questions related with the subject to the teacher. They can do their questions in class, to his office in office hours, through email, or Moodle. Lecture: The students can ask questions related with the subject to the teacher. They can do their questions in class, to his office in office hours, through email, or Moodle. The students can be attended out of office hours if they previously agree a meeting with the teacher.

Assessment
Methodologies Competences Description Weight        
Practicals using information and communication technologies (ICTs) in computer rooms
A1
A4
G1
CT2
CT3
CT4
CT5
The students have to develop a copy detection technique.

The practice can be performed individually or in a group of two students.

The students will present their works in class. All works (techniques developed) compete between them. The best work obtains the best grade.
30
Objective short-answer tests
A1
A4
CT7
The students have to conduct a written test of the units 1 and 2.

Passing this test is required to pass the course.
10
Extended-answer tests
A1
A4
G1
G2
CT2
CT3
There are two written test.

The first test comprises the units 3 and 4.

The second test comprises the unit 5.

Both written tests have the same weight, i.e. a 30% each of them.

Passing both tests is required to pass the course.
60
Others  
 
Other comments and second exam session

Students who do not pass the subject in the continuous assessment have to carry out a examination on the second call, and deliver the practice. The exam will consist of three parts, corresponding to the three parts of the course (first part: units 1 and 2 - second part: units 3 and 4 - third part: unit 5). Each part is scored out of 10 points. The students have to obtain at least 4 in each of the parts to pass the examination, and the sum of the three parts must be greater than 15 points. The practice must have a minimum of five to pass the course. Otherwise, the students can not pass the course.

Students may not bring any electronic devices on the written tests.


Sources of information

Basic William Rosenblatt, Digital Rights Management: Business and Technology, Hungry Minds Inc,U.S., 2002
Jessica Litman, Digital Copyright: Protecting Intellectual Property on the Internet, Prometheus Books , 2000
Stefan Katzenbeisser, Fabien A. P. Petitcolas, Information Hiding techniques for steganography and digital watermarking, Artech House , 2000
Ingemar Cox, Matthew Miller, Jeffrey Bloom and Jessica Fridrich, Digital Watermarking and Steganographt, Morgan Kaufmann, 2007
Mauro Barni and Franco Bartolini, Watermarking Systems Engineering: Enabling Digital Assets Security and Other Applications, Dekker, 2007
James F. Ransome and John R. Rittinghouse, Voice over Internet Protocol (VoIP) Security, Digital Press, 2004
Rainer Böhme, Advanced Statistical Steganalysis , Springer, 2010
Anjan Kumar Payra, Steganology for the Computer Forensics Examiners: Steganography,Steganalysis,Sterilization techniques for security issues, LAP LAMBERT Academic Publishing, 2013

Complementary

Recommendations

Subjects that are recommended to be taken simultaneously
PRIVACY PROTECTION/17685107

Subjects that it is recommended to have taken before
CRYPTOGRAPHY AND INFORMATION SECURITY/17685101
(*)The teaching guide is the document in which the URV publishes the information about all its courses. It is a public document and cannot be modified. Only in exceptional cases can it be revised by the competent agent or duly revised so that it is in line with current legislation.