在取证调查中检测和操纵压缩交替数据流

2008 Third International Annual Workshop on Digital Forensics and Incident Analysis Pub Date : 2008-10-09 DOI:10.1109/WDFIA.2008.9

Adamantini Martini, Alexandros Zaharis, C. Ilioudis

{"title":"在取证调查中检测和操纵压缩交替数据流","authors":"Adamantini Martini, Alexandros Zaharis, C. Ilioudis","doi":"10.1109/WDFIA.2008.9","DOIUrl":null,"url":null,"abstract":"Data hiding technique through alternate data streams in compressed form is poorly documented and less known among forensic experts. This paper deals with the documentation of compressed ADS and their attributes concerning hiding information, provides a simple technique of creating compressed ADS and using it in a malicious manner. Finally a method is presented in order to detect and manipulate ADS in a proper way, complying with the computer forensic techniques.","PeriodicalId":259636,"journal":{"name":"2008 Third International Annual Workshop on Digital Forensics and Incident Analysis","volume":"25 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2008-10-09","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"7","resultStr":"{\"title\":\"Detecting and Manipulating Compressed Alternate Data Streams in a Forensics Investigation\",\"authors\":\"Adamantini Martini, Alexandros Zaharis, C. Ilioudis\",\"doi\":\"10.1109/WDFIA.2008.9\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"Data hiding technique through alternate data streams in compressed form is poorly documented and less known among forensic experts. This paper deals with the documentation of compressed ADS and their attributes concerning hiding information, provides a simple technique of creating compressed ADS and using it in a malicious manner. Finally a method is presented in order to detect and manipulate ADS in a proper way, complying with the computer forensic techniques.\",\"PeriodicalId\":259636,\"journal\":{\"name\":\"2008 Third International Annual Workshop on Digital Forensics and Incident Analysis\",\"volume\":\"25 1\",\"pages\":\"0\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2008-10-09\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"7\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"2008 Third International Annual Workshop on Digital Forensics and Incident Analysis\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.1109/WDFIA.2008.9\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"2008 Third International Annual Workshop on Digital Forensics and Incident Analysis","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/WDFIA.2008.9","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}

引用次数: 7

摘要

通过压缩形式的替代数据流来隐藏数据的技术文档很少，在法医专家中也不太了解。本文讨论了压缩ADS的文档及其隐藏信息的属性，提供了一种创建压缩ADS并恶意使用的简单技术。最后提出了一种符合计算机取证技术的ADS检测和操纵方法。

本文章由计算机程序翻译，如有差异，请以英文原文为准。

查看原文

微信好友朋友圈 QQ好友复制链接

本刊更多论文

Detecting and Manipulating Compressed Alternate Data Streams in a Forensics Investigation

Data hiding technique through alternate data streams in compressed form is poorly documented and less known among forensic experts. This paper deals with the documentation of compressed ADS and their attributes concerning hiding information, provides a simple technique of creating compressed ADS and using it in a malicious manner. Finally a method is presented in order to detect and manipulate ADS in a proper way, complying with the computer forensic techniques.

求助全文

通过发布文献求助，成功后即可免费获取论文全文。去求助

来源期刊

2008 Third International Annual Workshop on Digital Forensics and Incident Analysis

自引率

0.00%

发文量