• DocumentCode
    624954
  • Title

    Anti-forensics: The Next Step in Digital Forensics Tool Testing

  • Author

    Wundram, Martin ; Freiling, Felix C. ; Moch, Christian

  • Author_Institution
    TronicGuard GmbH, Cologne, Germany
  • fYear
    2013
  • fDate
    12-14 March 2013
  • Firstpage
    83
  • Lastpage
    97
  • Abstract
    We classify and present established and new attacks on digital forensics tools. In particular, we present the first and surprisingly simple code injection attack on a commercial analysis tool that potentially allows to infiltrate the analysis system. We argue that digital forensics tool testing must mature to cater for malicious adversaries. We also discuss possible countermeasures.
  • Keywords
    digital forensics; antiforensics; code injection attack; commercial analysis tool; digital forensics tool testing; malicious adversary; Digital forensics; Hard disks; Software; Taxonomy; Testing; Weapons; code injection; computer forensics; hacking; tool testing;
  • fLanguage
    English
  • Publisher
    ieee
  • Conference_Titel
    IT Security Incident Management and IT Forensics (IMF), 2013 Seventh International Conference on
  • Conference_Location
    Nuremberg
  • Print_ISBN
    978-1-4673-6307-5
  • Type

    conf

  • DOI
    10.1109/IMF.2013.17
  • Filename
    6568557