tailieunhanh - Analysis of data hiding with ads in NTFS

A suspect hides the data in these files so that they are not accessible to anyone. There are various ways to hide the data in NTFS file system. This paper discusses about the hiding the data on the NTFS file system with alternate data stream. | ISSN:2249-5789 Tejpal Sharma et al, International Journal of Computer Science & Communication Networks,Vol 6(2),45-48 Analysis of Data Hiding With ADS in NTFS Tejpal Sharma Assitant Professsor, Deptt., CGC-College of Engg. tejpal_3205@ Gaurav Goel Ranjeet Singh Assitant Professsor, Assitant Professsor, Deptt. Deptt. CGC-College of Engg. CGC-College of Engg. Abstract NTFS file system which restores and manages the important data is a common file system in Windows Operating System. Data stored in the files is the main source of evidence in computer forensics. A suspect hides the data in these files so that they are not accessible to anyone. There are various ways to hide the data in NTFS file system. This paper discusses about the hiding the data on the NTFS file system with alternate data stream. Keywords- ADS, NTFS, Master File Table. 1. Introduction Criminals tend to hide the sensitive information so that even if their computers are retrieved by anyone, there is no proof that can be used against them. As a new kind of high-technology crime, the evidence of computer crime is stored and transmitted through the computers or webs. Therefore, based on the computer forensics, tapping and analyzing of the data stored in various storage devices becomes an important part of taking evidence from computers [3]. in computer forensics. The focus of this paper will be hidden data that resides on the NTFS file system with alternate data stream. 2. NTFS Basic Concepts NTFS stands for New Technologies File System. It is a primary file system available for Microsoft Windows operating systems. A file system determines how files are named, stored, and organized on a volume. A file system manages files and folders, and the information needed to locate and access these items by local and remote users. NTFS is needed to organize and access information on a hard drive disk, optical media, .