Petar Čisar
Криминалистичкополицијска академија, Земун
Keywords:
digital forensics, anti-forensics, data hiding, forensic tools
Abstract
Digital forensics is essential for the successful opposition of computer crime. It is associated with many challenges, including rapid changes in computer and digital devices, and more sophisticated attacks on computer systems and networks and the rapid increase in abuse of ICT systems. Though many of existing defensive techniques can reliably detect traditional forgeries, recent research has shown that they can be bypassed by anti-forensic operations designed to hide evidence of such activity. In response, new forensic techniques have been developed to detect the use of anti-forensics. In light of this, there is a need to develop a theoretical understanding of the interactions between anti-forensic act and a forensic investigator.