Toward Understanding the Challenges and Countermeasures in Computer Anti-Forensics

Authors:
Kamal Dahbur;Bassil Mohammad
Affiliations:
New York Institute of Technology, Jordan;New York Institute of Technology, Jordan
Venue:
International Journal of Cloud Applications and Computing
Year:
2011

Citing 4
Cited 0

Virtualization: a key feature of cloud computing

Proceedings of the International Conference and Workshop on Emerging Trends in Technology
Guide to Computer Forensics and Investigations

Guide to Computer Forensics and Investigations
How to break MD5 and other hash functions

EUROCRYPT'05 Proceedings of the 24th annual international conference on Theory and Applications of Cryptographic Techniques
Arriving at an anti-forensics consensus: Examining how to define and control the anti-forensics problem

Digital Investigation: The International Journal of Digital Forensics & Incident Response

Quantified Score

Hi-index	0.00

Visualization

Abstract

The term computer anti-forensics CAF generally refers to a set of tactical and technical measures intended to circumvent the efforts and objectives of the field of computer and network forensics CF. Many scientific techniques, procedures, and technological tools have evolved and effectively applied in the field of CF to assist scientists and investigators in acquiring and analyzing digital evidence for the purpose of solving cases that involve the use or misuse of computer systems. CAF has emerged as a CF counterpart that plants obstacles throughout the path of computer investigations. The purpose of this paper is to highlight the challenges introduced by anti-forensics, explore various CAF mechanisms, tools, and techniques, provide a coherent classification for them, and discuss their effectiveness. Moreover, the authors discuss the challenges in implementing effective countermeasures against these techniques. A set of recommendations are presented with future research opportunities.