Framework for detecting and extracting files hidden by encryption and steganography on android devices :

Abstract

Anti-forensics aims at getting rid of all traces of digital evidences, nullify the data or increase the complexity of the investigation. In data hiding anti-forensics techniques of encryption and steganography, the. evidence is completely out of view and therefore an investigator will not be able to use it in the investigation process. The evidence is not eliminated from the device, it's not even destroyed, however, it is just made less visible to the investigator. Algorithms that combine the two- techniques of encryption and steganography have also become popular, making it even more difficult for digital investigations. This Research has developed an easy to use framework for detecting and: extracting files (potential evidence) hidden by both anti-forensics techniques of symmetric encryption and steganography, an extension of Android Mobile Forensic Analyzer for Stego Data [7].