본문 바로가기
  • Home

A Steganographic Data Hiding Method in Timestamps by Bit Correction Technique for Anti-Forensics

  • Journal of The Korea Society of Computer and Information
  • Abbr : JKSCI
  • 2018, 23(8), pp.75-84
  • DOI : 10.9708/jksci.2018.23.08.075
  • Publisher : The Korean Society Of Computer And Information
  • Research Area : Engineering > Computer Science
  • Received : August 13, 2018
  • Accepted : August 27, 2018
  • Published : August 31, 2018

Cho Gyu Sang 1

1동양대학교

Accredited

ABSTRACT

In this research, a bit correction technique of data hiding method in timestamp of MFT entry in NTFS file system is proposed. This method is proposed in two ways, depending on the number of bytes of data to hide. A basic data hiding method using a bit correction technique to solve the problems of the conventional 2-byte technique is proposed. In order to increase the capacity of the data, a 3-byte data hiding method using an extended bit correction technique is proposed. The data hiding method in the timestamps is based on the fact that is not revealed in the Windows explorer window and the command prompt window even if any data is hidden in the timestamp area of less than one second. It is shown that the validity of the proposed method through the experimental two cases of the basic data hiding method by the bit correction method and the 3-byte data hiding method by the extended bit correction method.

Citation status

* References for papers published after 2022 are currently being built.

This paper was written with support from the National Research Foundation of Korea.