@article{ART002377560},
author={Cho Gyu Sang},
title={A Method of Data Hiding in a File System by Modifying Directory Information},
journal={Journal of The Korea Society of Computer and Information},
issn={1598-849X},
year={2018},
volume={23},
number={8},
pages={85-93},
doi={10.9708/jksci.2018.23.08.085}
TY - JOUR
AU - Cho Gyu Sang
TI - A Method of Data Hiding in a File System by Modifying Directory Information
JO - Journal of The Korea Society of Computer and Information
PY - 2018
VL - 23
IS - 8
PB - The Korean Society Of Computer And Information
SP - 85
EP - 93
SN - 1598-849X
AB - In this research, it is proposed that a method to hide data by modifying directory index entry information.
It consists of two methods: a directory list hiding and a file contents hiding. The directory list hiding method is to avoid the list of files from appearing in the file explorer window or the command prompt window.
By modifying the file names of several index entries to make them duplicated, if the duplicated files are deleted, then the only the original file is deleted, but the modified files are retained in the MFT entry intact. So, the fact that these files are hidden is not exposed.
The file contents hiding is to allocate data to be hidden on an empty index record page that is not used. If many files are made in the directory, several 4KB index records are allocated. NTFS leaves the empty index records unchanged after deleting the files. By modifying the run-list of the index record with the cluster number of the file-to-hide, the contents of the file-to-hide are hidden in the index record.
By applying the proposed method to the case of hiding two files, the file lists are not exposed in the file explorer and the command prompt window, and the contents of the file-to-hide are hidden in the empty index record. It is proved that the proposed method has effectiveness and validity.
KW - Data hiding;Directory;Modifying direcotory information;File System;NTFS
DO - 10.9708/jksci.2018.23.08.085
ER -
Cho Gyu Sang. (2018). A Method of Data Hiding in a File System by Modifying Directory Information. Journal of The Korea Society of Computer and Information, 23(8), 85-93.
Cho Gyu Sang. 2018, "A Method of Data Hiding in a File System by Modifying Directory Information", Journal of The Korea Society of Computer and Information, vol.23, no.8 pp.85-93. Available from: doi:10.9708/jksci.2018.23.08.085
Cho Gyu Sang "A Method of Data Hiding in a File System by Modifying Directory Information" Journal of The Korea Society of Computer and Information 23.8 pp.85-93 (2018) : 85.
Cho Gyu Sang. A Method of Data Hiding in a File System by Modifying Directory Information. 2018; 23(8), 85-93. Available from: doi:10.9708/jksci.2018.23.08.085
Cho Gyu Sang. "A Method of Data Hiding in a File System by Modifying Directory Information" Journal of The Korea Society of Computer and Information 23, no.8 (2018) : 85-93.doi: 10.9708/jksci.2018.23.08.085
Cho Gyu Sang. A Method of Data Hiding in a File System by Modifying Directory Information. Journal of The Korea Society of Computer and Information, 23(8), 85-93. doi: 10.9708/jksci.2018.23.08.085
Cho Gyu Sang. A Method of Data Hiding in a File System by Modifying Directory Information. Journal of The Korea Society of Computer and Information. 2018; 23(8) 85-93. doi: 10.9708/jksci.2018.23.08.085
Cho Gyu Sang. A Method of Data Hiding in a File System by Modifying Directory Information. 2018; 23(8), 85-93. Available from: doi:10.9708/jksci.2018.23.08.085
Cho Gyu Sang. "A Method of Data Hiding in a File System by Modifying Directory Information" Journal of The Korea Society of Computer and Information 23, no.8 (2018) : 85-93.doi: 10.9708/jksci.2018.23.08.085
