SoK: Understanding Anti-Forensics Concepts and Research Practices Across Forensic Subdomains
Fuente:
arXiv
Saved in:
| Main Authors: | , , , , , , , , , , , |
|---|---|
| Format: | Preprint |
| Published: |
2026
|
| Subjects: | |
| Online Access: | |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1866917391228731392 |
|---|---|
| author | Schneider, Janine Ramming, Florian Eichhorn, Maximilian Pugliese, Gaston Hargreaves, Chris Gruber, Jan Schilling, Joschua Geus, Julian Mayer, Kevin Uhlenbrock, Lea Voigt, Lena Breitinger, Frank |
| author_facet | Schneider, Janine Ramming, Florian Eichhorn, Maximilian Pugliese, Gaston Hargreaves, Chris Gruber, Jan Schilling, Joschua Geus, Julian Mayer, Kevin Uhlenbrock, Lea Voigt, Lena Breitinger, Frank |
| contents | Anti-forensics includes a growing set of techniques designed to obstruct forensic analysis. While cybercriminals increasingly rely on these methods, they also help researchers identify and remedy weaknesses in forensic tools, advancing the overall robustness of digital forensics. Despite repeated efforts to define it, anti-forensics remains vague and inconsistent in its use. It also poses ethical challenges regarding the appropriateness of research practices and the legitimacy of the field itself. This article presents a systematic analysis of 123 publications on anti-forensics, combining qualitative and quantitative methods. We quantify the main techniques and attack vectors, examine their occurrence in different digital forensic subdomains, and identify typical research methods, motivations, and applications. This work also discusses what these findings mean for future research and proposes directions for building a more coherent and ethically grounded understanding of anti-forensics. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2604_05770 |
| institution | arXiv |
| publishDate | 2026 |
| record_format | arxiv |
| spellingShingle | SoK: Understanding Anti-Forensics Concepts and Research Practices Across Forensic Subdomains Schneider, Janine Ramming, Florian Eichhorn, Maximilian Pugliese, Gaston Hargreaves, Chris Gruber, Jan Schilling, Joschua Geus, Julian Mayer, Kevin Uhlenbrock, Lea Voigt, Lena Breitinger, Frank Cryptography and Security Anti-forensics includes a growing set of techniques designed to obstruct forensic analysis. While cybercriminals increasingly rely on these methods, they also help researchers identify and remedy weaknesses in forensic tools, advancing the overall robustness of digital forensics. Despite repeated efforts to define it, anti-forensics remains vague and inconsistent in its use. It also poses ethical challenges regarding the appropriateness of research practices and the legitimacy of the field itself. This article presents a systematic analysis of 123 publications on anti-forensics, combining qualitative and quantitative methods. We quantify the main techniques and attack vectors, examine their occurrence in different digital forensic subdomains, and identify typical research methods, motivations, and applications. This work also discusses what these findings mean for future research and proposes directions for building a more coherent and ethically grounded understanding of anti-forensics. |
| title | SoK: Understanding Anti-Forensics Concepts and Research Practices Across Forensic Subdomains |
| topic | Cryptography and Security |
| url | https://arxiv.org/abs/2604.05770 |