CAS-002 · Question #302
A security consultant is investigating acts of corporate espionage within an organization. Each time the organization releases confidential information to high-ranking engineers, the information is…
The correct answer is A. Digital watermarking. Digital watermarking embeds unique, hidden identifiers into documents so that if a copy is leaked, the watermark reveals which recipient's copy was the source.
Question
A security consultant is investigating acts of corporate espionage within an organization. Each time the organization releases confidential information to high-ranking engineers, the information is soon leaked to competing companies. Which of the following techniques should the consultant use to discover the source of the information leaks?
Options
- ADigital watermarking
- BSteganography
- CEnforce non-disclosure agreements
- DDigital rights management
How the community answered
(34 responses)- A82% (28)
- B6% (2)
- C9% (3)
- D3% (1)
Why each option
Digital watermarking embeds unique, hidden identifiers into documents so that if a copy is leaked, the watermark reveals which recipient's copy was the source.
Digital watermarking assigns a unique, imperceptible marker to each copy of a confidential document distributed to different recipients. When a leak occurs, forensic analysis of the leaked document reveals whose watermarked copy was disclosed, directly identifying the source of the leak.
Steganography conceals secret messages inside other data for covert communication, but it does not embed traceable identifiers that identify which recipient leaked a document.
NDAs are a legal deterrent and contractual obligation, but they do not provide a technical mechanism to identify which individual is responsible for an active leak.
Digital rights management controls access and usage permissions for content, but it does not create unique per-recipient markers that can forensically trace a leaked copy back to its source.
Concept tested: Digital watermarking for leak source attribution
Source: https://www.nist.gov/system/files/documents/2017/05/09/NIST.SP.800-188.pdf
Topics
Community Discussion
No community discussion yet for this question.