Methods of Information Hiding and Detection in File Systems
Jeremy Davis, Joe MacLean, David A. Dampier · 2010
Multiple methods of information hiding can be used by criminals to conceal incriminating data. The FAT and NTFS file systems are the most commonly used file systems in operating systems today, and therefore are the most exploited. Most methods of information hiding can be detected using forensic tool kits designed specifically for cyber crime investigators. The purpose of this paper is to explore various methods of information hiding in the FAT and NTFS file systems.