Data concealment and detection in Microsoft Office 2007 files
- Authors
- Park, Bora; Park, Jungheum; Lee, Sangjin
- Issue Date
- Mar-2009
- Publisher
- ELSEVIER SCI LTD
- Keywords
- Microsoft Office 2007 file; OOXML; Data concealment; Hidden data detection; Unknown part; Unknown relationship
- Citation
- DIGITAL INVESTIGATION, v.5, no.3-4, pp.104 - 114
- Indexed
- SCIE
SCOPUS
- Journal Title
- DIGITAL INVESTIGATION
- Volume
- 5
- Number
- 3-4
- Start Page
- 104
- End Page
- 114
- URI
- https://scholar.korea.ac.kr/handle/2021.sw.korea/120530
- DOI
- 10.1016/j.diin.2008.12.001
- ISSN
- 1742-2876
- Abstract
- As more offenders attempt to conceal incriminating data or stolen information, it is important for forensic examiners and computer security professionals to know where to look for concealed information. This paper demonstrates how data concealment in Microsoft Office 2007 files is possible. The Office Open XML ( OOXML) format forms the basis of Microsoft Office 2007, and an individual can use OOXML to define customized parts, relationships, or both within a Microsoft Office 2007 file to store and conceal information. Fortunately for digital investigators, such concealed data can be detected by looking for the existence of unknown parts or relationships. (C) 2008 Elsevier Ltd. All rights reserved.
- Files in This Item
- There are no files associated with this item.
- Appears in
Collections - School of Cyber Security > Department of Information Security > 1. Journal Articles
![qrcode](https://api.qrserver.com/v1/create-qr-code/?size=55x55&data=https://scholar.korea.ac.kr/handle/2021.sw.korea/120530)
Items in ScholarWorks are protected by copyright, with all rights reserved, unless otherwise indicated.