{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T04:29:30Z","timestamp":1750220970887,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":18,"publisher":"ACM","license":[{"start":{"date-parts":[[2019,8,26]],"date-time":"2019-08-26T00:00:00Z","timestamp":1566777600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"German Federal Ministry of Education and Research","award":["13FH019IB6"],"award-info":[{"award-number":["13FH019IB6"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2019,8,26]]},"DOI":"10.1145\/3339252.3340524","type":"proceedings-article","created":{"date-parts":[[2019,8,9]],"date-time":"2019-08-09T12:21:03Z","timestamp":1565353263000},"page":"1-10","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":3,"title":["Revisiting Data Hiding Techniques for Apple File System"],"prefix":"10.1145","author":[{"given":"Thomas","family":"G\u00f6bel","sequence":"first","affiliation":[{"name":"da\/sec - Biometrics and Internet Security Research Group, Hochschule Darmstadt, Germany"}]},{"given":"Jan","family":"T\u00fcrr","sequence":"additional","affiliation":[{"name":"da\/sec - Biometrics and Internet Security Research Group, Hochschule Darmstadt, Germany"}]},{"given":"Harald","family":"Baier","sequence":"additional","affiliation":[{"name":"da\/sec - Biometrics and Internet Security Research Group, Hochschule Darmstadt, Germany"}]}],"member":"320","published-online":{"date-parts":[[2019,8,26]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Avecto.com. 2016. State of Mac Security 2016 Enterprise Mac anagement.  Avecto.com. 2016. State of Mac Security 2016 Enterprise Mac anagement."},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2016.04.006"},{"key":"e_1_3_2_1_3_1","unstructured":"Andreas Dewald and Jonas Plum. 2018. ERNW WHITEPAPER65 - APFS internals for forensic analysis. https:\/\/www.ernw.de\/en\/whitepapers\/issue-65.html last visited 05.04.2019.  Andreas Dewald and Jonas Plum. 2018. ERNW WHITEPAPER65 - APFS internals for forensic analysis. https:\/\/www.ernw.de\/en\/whitepapers\/issue-65.html last visited 05.04.2019."},{"key":"e_1_3_2_1_4_1","volume-title":"DFRWS 2005 USA.","author":"Eckstein Knut","year":"2005","unstructured":"Knut Eckstein and Marko Jahnke . 2005 . Data Hiding in Journaling File Systems .. In DFRWS 2005 USA. Knut Eckstein and Marko Jahnke. 2005. Data Hiding in Journaling File Systems.. In DFRWS 2005 USA."},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2018.01.014"},{"key":"e_1_3_2_1_6_1","volume-title":"Proceedings of the 10th EAI International Conference on Digital Forensics and Cyber Crime (ICDF2C), New Orleans (United States)","author":"G\u00f6bel Thomas","year":"2018","unstructured":"Thomas G\u00f6bel and Harald Baier . 2018 . fishy - A Framework for Implementing Filesystem-based Data Hiding Techniques . In Proceedings of the 10th EAI International Conference on Digital Forensics and Cyber Crime (ICDF2C), New Orleans (United States) , September 2018. Thomas G\u00f6bel and Harald Baier. 2018. fishy - A Framework for Implementing Filesystem-based Data Hiding Techniques. In Proceedings of the 10th EAI International Conference on Digital Forensics and Cyber Crime (ICDF2C), New Orleans (United States), September 2018."},{"key":"e_1_3_2_1_7_1","unstructured":"Grugq. 2002. Defeating Forensic Analysis on Unix. https:\/\/grugq.github.io\/docs\/phrack-59-06.txt last visited 21.06.2019.  Grugq. 2002. Defeating Forensic Analysis on Unix. https:\/\/grugq.github.io\/docs\/phrack-59-06.txt last visited 21.06.2019."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2017.07.003"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2006.06.005"},{"key":"e_1_3_2_1_10_1","unstructured":"Apple Inc. 2019. Apple File System Reference. https:\/\/developer.apple.com\/support\/apple-file-system\/Apple-File-System-Reference.pdf last visited 29.01.2019.  Apple Inc. 2019. Apple File System Reference. https:\/\/developer.apple.com\/support\/apple-file-system\/Apple-File-System-Reference.pdf last visited 29.01.2019."},{"key":"e_1_3_2_1_11_1","unstructured":"Stephen P Larson. 2009. Concerning File slack. (2009). http:\/\/commons.erau.edu\/cgi\/viewcontent.cgi?article=1090&context=adfsl last visited 24.04.2019.  Stephen P Larson. 2009. Concerning File slack. (2009). http:\/\/commons.erau.edu\/cgi\/viewcontent.cgi?article=1090&context=adfsl last visited 24.04.2019."},{"key":"e_1_3_2_1_12_1","volume-title":"INTRODUCTORY COMPUTER FORENSICS: A hands-on practical approach. SPRINGER, {S.l.}.","author":"XIAODONG","year":"2019","unstructured":"XIAODONG LIN. 2019 . INTRODUCTORY COMPUTER FORENSICS: A hands-on practical approach. SPRINGER, {S.l.}. XIAODONG LIN. 2019. INTRODUCTORY COMPUTER FORENSICS: A hands-on practical approach. SPRINGER, {S.l.}."},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2016.04.010"},{"key":"e_1_3_2_1_14_1","unstructured":"Bhushan Patole Ashok Shinde Mohit Bhatt and Pallavi Shimpi. 2018. Data Hiding in Audio-Video using Anti Forensics Technique for Secret Message and Data in MP4 Container.  Bhushan Patole Ashok Shinde Mohit Bhatt and Pallavi Shimpi. 2018. Data Hiding in Audio-Video using Anti Forensics Technique for Secret Message and Data in MP4 Container."},{"key":"e_1_3_2_1_15_1","unstructured":"Laura Pfeiffer. 2017. Forensische Analyse des Apple File System (APFS).  Laura Pfeiffer. 2017. Forensische Analyse des Apple File System (APFS)."},{"key":"e_1_3_2_1_16_1","unstructured":"Jonas Plum. 2018. Checksum calculation for APFS taken from afro implementation. https:\/\/github.com\/cugu\/afro\/blob\/master\/afro\/checksum.py last visited 07.01.2019.  Jonas Plum. 2018. Checksum calculation for APFS taken from afro implementation. https:\/\/github.com\/cugu\/afro\/blob\/master\/afro\/checksum.py last visited 07.01.2019."},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/3230833.3232808"},{"key":"e_1_3_2_1_18_1","unstructured":"BlackBag Technologies. 2019. Providing APFS Support to the Sleuth Kit Framework. https:\/\/www.blackbagtech.com\/blog\/2018\/12\/19\/present-santa-apfs-providing-apfs-support-sleuth-kit-framework last visited 16.04.2019.  BlackBag Technologies. 2019. Providing APFS Support to the Sleuth Kit Framework. https:\/\/www.blackbagtech.com\/blog\/2018\/12\/19\/present-santa-apfs-providing-apfs-support-sleuth-kit-framework last visited 16.04.2019."}],"event":{"name":"ARES '19: 14th International Conference on Availability, Reliability and Security","acronym":"ARES '19","location":"Canterbury CA United Kingdom"},"container-title":["Proceedings of the 14th International Conference on Availability, Reliability and Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3339252.3340524","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3339252.3340524","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T23:54:29Z","timestamp":1750204469000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3339252.3340524"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,8,26]]},"references-count":18,"alternative-id":["10.1145\/3339252.3340524","10.1145\/3339252"],"URL":"https:\/\/doi.org\/10.1145\/3339252.3340524","relation":{},"subject":[],"published":{"date-parts":[[2019,8,26]]},"assertion":[{"value":"2019-08-26","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}