{"id":"https://openalex.org/W2408475604","doi":"https://doi.org/10.17661/jkiiect.2015.8.4.327","title":"A New NTFS Anti-Forensic Technique for NTFS Index Entry","display_name":"A New NTFS Anti-Forensic Technique for NTFS Index Entry","publication_year":2015,"publication_date":"2015-08-30","ids":{"openalex":"https://openalex.org/W2408475604","doi":"https://doi.org/10.17661/jkiiect.2015.8.4.327","mag":"2408475604"},"language":"en","primary_location":{"id":"doi:10.17661/jkiiect.2015.8.4.327","doi":"https://doi.org/10.17661/jkiiect.2015.8.4.327","is_oa":true,"landing_page_url":"https://doi.org/10.17661/jkiiect.2015.8.4.327","pdf_url":"http://koreascience.or.kr:80/article/JAKO201534851987893.pdf","source":{"id":"https://openalex.org/S4306496944","display_name":"\ud55c\uad6d\uc815\ubcf4\uc804\uc790\ud1b5\uc2e0\uae30\uc220\ud559\ud68c \ub17c\ubb38\uc9c0","issn_l":"2005-081X","issn":["2005-081X","2288-9302"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":["kci-registered"],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"The Journal of Korea Institute of Information, Electronics, and Communication Technology","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"http://koreascience.or.kr:80/article/JAKO201534851987893.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5039899378","display_name":"Gyu-Sang Cho","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I201873833","display_name":"Dongyang University","ror":"https://ror.org/05v1ekw79","country_code":"KR","type":"education","lineage":["https://openalex.org/I201873833"]}],"countries":["KR"],"is_corresponding":true,"raw_author_name":"Gyu-Sang Cho","raw_affiliation_strings":["Department of Computer Information , Dongyang University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Information , Dongyang University","institution_ids":["https://openalex.org/I201873833"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5039899378"],"corresponding_institution_ids":["https://openalex.org/I201873833"],"apc_list":null,"apc_paid":null,"fwci":0.5538,"has_fulltext":true,"cited_by_count":3,"citation_normalized_percentile":{"value":0.81885529,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":88,"max":93},"biblio":{"volume":"8","issue":"4","first_page":"327","last_page":"337"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9945999979972839,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9945999979972839,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10388","display_name":"Advanced Steganography and Watermarking Techniques","score":0.0038999998942017555,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anti-forensics","display_name":"anti-forensics","score":0.9490000009536743},{"id":"https://openalex.org/keywords/ntfs-file-system","display_name":"NTFS file system","score":0.875},{"id":"https://openalex.org/keywords/b-tree","display_name":"B-trees","score":0.7559999823570251},{"id":"https://openalex.org/keywords/digital-forensics","display_name":"digital forensics","score":0.824999988079071}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7064275741577148},{"id":"https://openalex.org/C2777683733","wikidata":"https://www.wikidata.org/wiki/Q201456","display_name":"Directory","level":2,"score":0.6471987366676331},{"id":"https://openalex.org/C2777382242","wikidata":"https://www.wikidata.org/wiki/Q6017816","display_name":"Index (typography)","level":2,"score":0.6441243290901184},{"id":"https://openalex.org/C113174947","wikidata":"https://www.wikidata.org/wiki/Q2859736","display_name":"Tree (set theory)","level":2,"score":0.5029904246330261},{"id":"https://openalex.org/C78669399","wikidata":"https://www.wikidata.org/wiki/Q677051","display_name":"B-tree","level":3,"score":0.4542139768600464},{"id":"https://openalex.org/C75165309","wikidata":"https://www.wikidata.org/wiki/Q2258979","display_name":"Search engine indexing","level":2,"score":0.422305703163147},{"id":"https://openalex.org/C2780940931","wikidata":"https://www.wikidata.org/wiki/Q174989","display_name":"File system","level":2,"score":0.4204752743244171},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.3742038607597351},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.2485988438129425},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.11795008182525635},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.17661/jkiiect.2015.8.4.327","doi":"https://doi.org/10.17661/jkiiect.2015.8.4.327","is_oa":true,"landing_page_url":"https://doi.org/10.17661/jkiiect.2015.8.4.327","pdf_url":"http://koreascience.or.kr:80/article/JAKO201534851987893.pdf","source":{"id":"https://openalex.org/S4306496944","display_name":"\ud55c\uad6d\uc815\ubcf4\uc804\uc790\ud1b5\uc2e0\uae30\uc220\ud559\ud68c \ub17c\ubb38\uc9c0","issn_l":"2005-081X","issn":["2005-081X","2288-9302"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":["kci-registered"],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"The Journal of Korea Institute of Information, Electronics, and Communication Technology","raw_type":"journal-article"},{"id":"mag:2474697005","doi":null,"is_oa":false,"landing_page_url":"http://www.dbpia.co.kr/Route/ArticleLink/arid=2901811?arid=2901811","pdf_url":null,"source":{"id":"https://openalex.org/S4306496944","display_name":"\ud55c\uad6d\uc815\ubcf4\uc804\uc790\ud1b5\uc2e0\uae30\uc220\ud559\ud68c \ub17c\ubb38\uc9c0","issn_l":"2005-081X","issn":["2005-081X","2288-9302"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":["kci-registered"],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":"\ud55c\uad6d\uc815\ubcf4\uc804\uc790\ud1b5\uc2e0\uae30\uc220\ud559\ud68c \ub17c\ubb38\uc9c0","raw_type":null}],"best_oa_location":{"id":"doi:10.17661/jkiiect.2015.8.4.327","doi":"https://doi.org/10.17661/jkiiect.2015.8.4.327","is_oa":true,"landing_page_url":"https://doi.org/10.17661/jkiiect.2015.8.4.327","pdf_url":"http://koreascience.or.kr:80/article/JAKO201534851987893.pdf","source":{"id":"https://openalex.org/S4306496944","display_name":"\ud55c\uad6d\uc815\ubcf4\uc804\uc790\ud1b5\uc2e0\uae30\uc220\ud559\ud68c \ub17c\ubb38\uc9c0","issn_l":"2005-081X","issn":["2005-081X","2288-9302"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":["kci-registered"],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"The Journal of Korea Institute of Information, Electronics, and Communication Technology","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320320671","display_name":"National Research Foundation","ror":"https://ror.org/05s0g1g46"},{"id":"https://openalex.org/F4320322120","display_name":"National Research Foundation of Korea","ror":"https://ror.org/013aysd81"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2408475604.pdf","grobid_xml":"https://content.openalex.org/works/W2408475604.grobid-xml"},"referenced_works_count":3,"referenced_works":["https://openalex.org/W1992607645","https://openalex.org/W2019239374","https://openalex.org/W2025334531"],"related_works":["https://openalex.org/W2474697005","https://openalex.org/W2289666709","https://openalex.org/W3145358777","https://openalex.org/W4206015602","https://openalex.org/W1634728930","https://openalex.org/W2019239374","https://openalex.org/W2410375380","https://openalex.org/W2325023004","https://openalex.org/W7154303051","https://openalex.org/W7098956712"],"abstract_inverted_index":{"\uc774":[0,52,64,77],"\ub17c\ubb38\uc5d0\uc11c\ub294":[1],"\uc708\ub3c4\uc6b0\uc988":[2],"NTFS":[3,99],"\ud30c\uc77c\uc2dc\uc2a4\ud15c\uc5d0\uc11c":[4],"\ub514\ub809\ud1a0\ub9ac\uc758":[5],"\uc778\ub371\uc2a4\uc5d0":[6],"\uba54\uc2dc\uc9c0\ub97c":[7,30,73],"\uc228\uae30\uae30":[8],"\uc704\ud55c":[9],"\uc0c8\ub85c\uc6b4":[10],"\uc548\ud2f0":[11],"\ud3ec\ub80c\uc2dd":[12],"\ubc29\ubc95\uc744":[13],"\uc81c\uc548\ud55c\ub2e4.":[14],"\uc778\ub371\uc2a4":[15,25,60],"\uc5d4\ud2b8\ub9ac":[16],"\uad00\ub9ac\ub97c":[17],"\uc704\ud558\uc5ec":[18],"\ucc44\ud0dd\ud558\uace0":[19],"\uc788\ub294":[20],"B-tree":[21,164],"\uad6c\uc870\uc758":[22],"\ud2b9\uc9d5\uc744":[23],"\uc774\uc6a9\ud558\uc5ec":[24],"\ub808\ucf54\ub4dc\uc758":[26,61],"\uc2ac\ub799":[27],"\uc601\uc5ed\uc5d0":[28],"\uc228\uae38":[29,34],"\uc800\uc7a5\ud55c\ub2e4.":[31],"\uc548\ud2f0\ud3ec\ub80c\uc2dd\uc744":[32],"\uc704\ud574":[33,39],"\uba54\uc2dc\uc9c0\uac00":[35],"\ub178\ucd9c\ub418\uc9c0":[36],"\uc54a\uac8c":[37],"\ud558\uae30":[38],"\uc11c":[40],"\uc704\uc7a5":[41],"\ud30c\uc77c\uc744":[42],"\uc0ac\uc6a9\ud558\uc5ec":[43],"\uc0ad\uc81c\ub41c":[44],"\ud30c\uc77c\uc774\ub984\uc758":[45],"\uc815\ubcf4\uac00":[46],"MFT":[47,151],"\uc5d4\ud2b8\ub9ac\uc5d0":[48],"\ub0a8\uc9c0":[49],"\uc54a\ub3c4\ub85d":[50],"\ud55c\ub2e4.":[51,69],"\uae30\ubc95\uc758":[53],"\ud575\uc2ec":[54],"\uc544\uc774\ub514\uc5b4":[55],"\uc758":[56],"\uc774\ud574\ud558\uae30":[57],"\uc704\ud574\uc11c":[58],"B-tree\ubc29\uc2dd\uc758":[59],"\uc6b4\uc601\ubc29\ubc95\uc744":[62],"\uc18c\uac1c\ud558\uace0":[63],"\uc5f0\uad6c\uc5d0\uc11c":[65],"\uc81c\uc548\ub41c":[66],"\uc54c\uace0\ub9ac\uc998\uc744":[67],"\uc124\uba85":[68],"\uc81c\uc791\ub41c":[70],"\uc18c\ud504\ud2b8\uc6e8\uc5b4\ub97c":[71],"\uc0ac\uc6a9\ud55c":[72],"\uc228\uae34":[74],"\uc0ac\ub840\ub97c":[75],"\ub4e4\uc5b4\uc11c":[76],"\ubc29\ubc95\uc774":[78],"\uc2e4\uc9c8\uc801\uc778":[79],"\uae30\ubc95\uc774\ub77c\ub294":[80],"\uac83\uc744":[81],"\ubcf4\uc778\ub2e4.":[82],"This":[83],"work":[84],"provides":[85],"new":[86],"forensic":[87],"techinque":[88],"to":[89,109,130,141],"a":[90,94,135,145,150,184,190],"hide":[91],"message":[92,118,128,186],"on":[93],"directory":[95],"index":[96,112,124],"in":[97,119,138,144],"Windows":[98],"file":[100,137,146],"system.":[101],"Behavior":[102],"characteristics":[103],"of":[104,122,149,155,158,170],"B-tree,":[105],"which":[106],"is":[107,114,178],"apoted":[108],"manage":[110],"an":[111,123],"entry,":[113],"utilized":[115],"for":[116,180],"hiding":[117,187],"slack":[120],"space":[121],"record.":[125],"For":[126],"hidden":[127],"not":[129,140],"be":[131,142],"exposured,":[132],"we":[133,162],"use":[134],"disguised":[136],"order":[139],"left":[143],"name":[147],"attribute":[148],"entry.":[152],"To":[153],"understand":[154],"key":[156],"idea":[157],"the":[159,168,175],"proposed":[160,169,176],"technique,":[161],"describe":[163],"indexing":[165],"method":[166],"and":[167],"this":[171],"work.":[172],"We":[173],"show":[174],"technique":[177],"practical":[179],"anti-forensic":[181],"usage":[182],"with":[183],"real":[185],"case":[188],"using":[189],"developed":[191],"software":[192],"tool.":[193]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2015,"cited_by_count":1}],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2016-06-24T00:00:00"}