In 2014, we launched our open-access repository which offers full text access to conference proceedings from many of our events including the INC and HAISA series. These papers are free to access and distribute (subject to citing the source).
» Openaccess proceedings » 6th International Workshop on Digital Forensics and Incident Analysis (WDFIA 2011)
 | 6th International Workshop on Digital Forensics and Incident Analysis (WDFIA 2011) |
Title: Combating Information Hiding Using Forensic Methodology
Author(s): Chelliah Balan, Divya S Vidyadharan, Dija Sulekha, Kakkassery Lazar Thomas
Reference: pp69-75
Keywords: Data hiding, MBR, EMBR
Abstract: Advancement in disk technology led to the development of hard disks of terra byte sizes. Users have the option to divide the storage into a number of partitions based on the nature of uses. Whenever a partition is created, a full track is reserved to store boot information and partition table information. But this information requires only the first sector of the track. The remaining space cannot be used for any other purpose, as the file system cannot access these free sectors and hence, the chances of overwriting these sectors are very low. So, this area can be used to hide any critical information. The user will get a large amount of storage space for hiding data depending on the number of partitions. In this paper, we describe the details of data hiding in unused areas that cannot be easily overwritten by the Operating Systems.
Download count: 3260
How to get this paper:
PDF copy of this paper is free to download. You may distribute this copy providing you cite this page as the source.