Title :
Methods of Information Hiding and Detection in File Systems
Author :
Davis, Jeremy ; MacLean, Joe ; Dampier, David
Author_Institution :
Dept. of Comput. Sci. & Eng., Mississippi State Univ., Starkville, MS, USA
Abstract :
Multiple methods of information hiding can be used by criminals to conceal incriminating data. The FAT and NTFS file systems are the most commonly used file systems in operating systems today, and therefore are the most exploited. Most methods of information hiding can be detected using forensic tool kits designed specifically for cyber crime investigators. The purpose of this paper is to explore various methods of information hiding in the FAT and NTFS file systems.
Keywords :
computer crime; computer forensics; data encapsulation; data mining; FAT file systems; NTFS file systems; cyber crime investigator; forensic tool kits; information detection; information hiding; operating systems; Computer science; Data engineering; Data structures; Digital forensics; File systems; Information analysis; Operating systems; Steganography; Thumb; Watermarking;
Conference_Titel :
Systematic Approaches to Digital Forensic Engineering (SADFE), 2010 Fifth IEEE International Workshop on
Conference_Location :
Oakland, CA
Print_ISBN :
978-0-7695-4052-8
DOI :
10.1109/SADFE.2010.17
