Advances In Anti-Forensic: In-Memory Distributed Hidden Storage presented at KiwiCon 2007

by Joshua ( Jabra ) Abraham,

Tags: Security

Summary : During this short talk we will present a new way to hide a file in-memory under Unix (nothing is written on disk). With the help of a proof-of-concept (DHIS - Distributed Hidden Storage) we will show that once hidden it's almost impossible to reconstitute the whole file for a forensic expert. We will also show how to prevent such technique.