论文信息 - Anti-forensics: The Next Step in Digital Forensics Tool Testing

Anti-forensics: The Next Step in Digital Forensics Tool Testing

We classify and present established and new attacks on digital forensics tools. In particular, we present the first and surprisingly simple code injection attack on a commercial analysis tool that potentially allows to infiltrate the analysis system. We argue that digital forensics tool testing must mature to cater for malicious adversaries. We also discuss possible countermeasures.

[1] Simson L. Garfinkel,et al. Anti-Forensics: Techniques, Detection and Countermeasures , 2007 .

[2] Gary C. Kessler,et al. Anti-Forensics and the Digital Investigator , 2007 .

[3] Dario Forte. Forensic Vulnerabilities: Dealing with forensic software vulnerabilities: is anti-forensics a real danger? , 2008 .

[4] Brian D. Carrier,et al. File System Forensic Analysis , 2005 .

[5] Chris K. Ridder. Evidentiary Implications of Potential Security Weaknesses in Forensic Software , 2009, Int. J. Digit. Crime Forensics.

[6] Richard P. Ayers,et al. Digital Forensics at the National Institute of Standards and Technology , 2008 .

[7] Ryan Harris,et al. Arriving at an anti-forensics consensus: Examining how to define and control the anti-forensics problem , 2006, Digit. Investig..

[8] Richard P. Ayers,et al. Digital Forensics at the National Institute of Standards and Technology | NIST , 2008 .

[9] Chris Palmer,et al. Breaking Forensics Software: Weaknesses in Critical Evidence Collection , 2007 .

[10] Carl E. Landwehr,et al. Basic concepts and taxonomy of dependable and secure computing , 2004, IEEE Transactions on Dependable and Secure Computing.