Physical Sciences and Mathematics Commons^™

Anti-Forensic Trace Detection In Digital Forensic Triage Investigations, Kyoung Jea Park, Jung-Min Park, Eun-Jin Kim, Chang Geun Cheon, Joshua I. James

Journal of Digital Forensics, Security and Law

Anti-forensics, whether intentionally to disrupt investigations or simply an effort to make a computer system run better, is becoming of increasing concern to digital investigators. This work attempts to assess the problem of anti-forensics techniques commonly deployed in South Korea. Based on identified challenges, a method of signature-based anti-forensic trace detection is proposed for triage purposes that will assist investigators in quickly making decisions about the suspect digital devices before conducting a full investigation. Finally, a prototype anti-forensic trace detection system is given to demonstrate the practicality of the proposed method.