{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,27]],"date-time":"2025-03-27T14:35:36Z","timestamp":1743086136703,"version":"3.40.3"},"publisher-location":"Cham","reference-count":19,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783319992761"},{"type":"electronic","value":"9783319992778"}],"license":[{"start":{"date-parts":[[2018,1,1]],"date-time":"2018-01-01T00:00:00Z","timestamp":1514764800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2018,1,1]],"date-time":"2018-01-01T00:00:00Z","timestamp":1514764800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2018]]},"DOI":"10.1007\/978-3-319-99277-8_6","type":"book-chapter","created":{"date-parts":[[2018,8,30]],"date-time":"2018-08-30T01:58:12Z","timestamp":1535594292000},"page":"87-110","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":4,"title":["Anti-Forensic Capacity and Detection Rating of Hidden Data in the Ext4 Filesystem"],"prefix":"10.1007","author":[{"given":"Thomas","family":"G\u00f6bel","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Harald","family":"Baier","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2018,8,30]]},"reference":[{"key":"6_CR1","doi-asserted-by":"crossref","unstructured":"R. Anderson, R. Needham and A. Shamir, The steganographic file system, Proceedings of the Second International Workshop on Information Hiding, pp. 73\u201382, 1998.","DOI":"10.1007\/3-540-49380-8_6"},{"key":"6_CR2","doi-asserted-by":"crossref","unstructured":"I. Baggili, A. BaAbdallah, D. Al-Safi and A. Marrington, Research trends in digital forensic science: An empirical analysis of published research, Proceedings of the Fourth International Conference on Digital Forensics and Cyber Crime, pp. 144\u2013157, 2012.","DOI":"10.1007\/978-3-642-39891-9_9"},{"key":"6_CR3","doi-asserted-by":"crossref","unstructured":"H. Berghel, D. Hoelzer and M. Sthultz, Data hiding tactics for Windows and Unix file systems, Advances in Computers, vol. 74, pp. 1\u201317, 2008.","DOI":"10.1016\/S0065-2458(08)00601-3"},{"key":"6_CR4","doi-asserted-by":"crossref","unstructured":"K. Conlan, I. Baggili and F. Breitinger, Anti-forensics: Furthering digital forensic science through a new extended granular taxonomy, Digital Investigation, vol. 18(S), pp. S66\u2013S75, 2016.","DOI":"10.1016\/j.diin.2016.04.006"},{"key":"6_CR5","unstructured":"K. Eckstein and M. Jahnke, Data hiding in journaling file systems, Proceedings of the Fifth Digital Forensic Research Workshop, 2005."},{"key":"6_CR6","doi-asserted-by":"crossref","unstructured":"K. Fairbanks, An analysis of Ext4 for digital forensics, Digital Investigation, vol. 9(S), pp. S118\u2013S130, 2012.","DOI":"10.1016\/j.diin.2012.05.010"},{"key":"6_CR7","unstructured":"S. Garfinkel, Anti-forensics: Techniques, detection and countermeasures, Proceedings of the Second International Conference on Information Warfare and Security, pp. 77\u201384, 2007."},{"key":"6_CR8","doi-asserted-by":"crossref","unstructured":"R. Harris, Arriving at an anti-forensics consensus: Examining how to define and control the anti-forensics problem, Digital Investigation, vol. 3(S), pp. S44\u2013S49, 2006.","DOI":"10.1016\/j.diin.2006.06.005"},{"key":"6_CR9","unstructured":"V. Holen, Reserved ext2\/ext3\/ext4 inodes (www.vidarholen.net\/contents\/junk\/inodes.html), 2012."},{"key":"6_CR10","unstructured":"A. Mathur, M. Cao, S. Bhattacharya, A. Dilger, A. Tomas and L. Vivier, The new Ext4 filesystem: Current status and future plans, Proceedings of the Linux Symposium, vol. 2, pp. 21\u201333, 2007."},{"key":"6_CR11","doi-asserted-by":"crossref","unstructured":"A. McDonald and M. Kuhn, StegFS: A steganographic file system for Linux, Proceedings of the Third International Workshop on Information Hiding, pp. 463\u2013477, 1999.","DOI":"10.1007\/10719724_32"},{"key":"6_CR12","doi-asserted-by":"crossref","unstructured":"S. Piper, M. Davis, G. Manes and S. Shenoi, Detecting hidden data in Ext2\/Ext3 file systems, in Advances in Digital Forensics, M. Pollitt and S. Shenoi (Eds.), Springer, Boston, Massachusetts, pp. 245\u2013256, 2005.","DOI":"10.1007\/0-387-31163-7_20"},{"key":"6_CR13","unstructured":"M. Rogers, Anti-forensics, presented at Lockheed Martin, San Diego, California, September 15, 2005."},{"key":"6_CR14","unstructured":"The Grugq, The art of defiling: Defeating forensic analysis, presented at Black Hat USA, 2005."},{"key":"6_CR15","unstructured":"C. Thuen, Understanding Counter-Forensics to Ensure a Successful Investigation, Department of Computer Science, University of Idaho, Moscow, Idaho (pdfs.semanticscholar.org\/d5b6\/b658d9178dbcdf33e095a53c45b4f7a43fc8.pdf), 2007."},{"key":"6_CR16","unstructured":"T. Ts\u2019o, Android will be using ext4 starting with Gingerbread, Blog Entry (thunk.org\/tytso\/blog\/2010\/12\/12\/android-will-be-using-ext4-starting-with-gingerbread), December 12, 2010."},{"key":"6_CR17","unstructured":"T. Ts\u2019o, Ext4 filesystem tree, Kernel.org git repositories (git.kernel.org\/pub\/scm\/linux\/kernel\/git\/tytso\/ext4.git), 2018."},{"key":"6_CR18","unstructured":"D. Wong, Ext4 Howto, Ext4 Wiki (ext4.wiki.kernel.org\/index.php\/Ext4\\_Howto), 2015."},{"key":"6_CR19","unstructured":"D. Wong, Ext4 Disk Layout, Ext4 Wiki (ext4.wiki.kernel.org\/index.php\/Ext4\\_Disk\\_Layout), 2016."}],"container-title":["IFIP Advances in Information and Communication Technology","Advances in Digital Forensics XIV"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-99277-8_6","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,8,29]],"date-time":"2022-08-29T00:03:13Z","timestamp":1661731393000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-319-99277-8_6"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018]]},"ISBN":["9783319992761","9783319992778"],"references-count":19,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-99277-8_6","relation":{},"ISSN":["1868-4238","1868-422X"],"issn-type":[{"type":"print","value":"1868-4238"},{"type":"electronic","value":"1868-422X"}],"subject":[],"published":{"date-parts":[[2018]]},"assertion":[{"value":"30 August 2018","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"DigitalForensics","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"IFIP International Conference on Digital Forensics","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"New Delhi","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"India","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2018","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"3 January 2018","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"5 January 2018","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"14","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"digitalforensics2018","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/www.ifip119.org\/Conferences\/WG11-9-CFP-2018.pdf","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"This content has been made available to all.","name":"free","label":"Free to read"}]}}