SoK: Understanding Anti-Forensics Concepts and Research Practices Across Forensic Subdomains

• URL: http://arxiv.org/abs/2604.05770v2
• Date: Wed, 08 Apr 2026 15:10:03 GMT
• Title: SoK: Understanding Anti-Forensics Concepts and Research Practices Across Forensic Subdomains
• Abstract summary: Anti-forensics remains vague and inconsistent in its use.<n>It poses ethical challenges regarding the appropriateness of research practices and the legitimacy of the field itself.
• Score: 0.2892345243321258
• License: http://creativecommons.org/licenses/by/4.0/
• Abstract: Anti-forensics includes a growing set of techniques designed to obstruct forensic analysis. While cybercriminals increasingly rely on these methods, they also help researchers identify and remedy weaknesses in forensic tools, advancing the overall robustness of digital forensics. Despite repeated efforts to define it, anti-forensics remains vague and inconsistent in its use. It also poses ethical challenges regarding the appropriateness of research practices and the legitimacy of the field itself. This article presents a systematic analysis of 123 publications on anti-forensics, combining qualitative and quantitative methods. We quantify the main techniques and attack vectors, examine their occurrence in different digital forensic subdomains, and identify typical research methods, motivations, and applications. This work also discusses what these findings mean for future research and proposes directions for building a more coherent and ethically grounded understanding of anti-forensics.

Related papers

• Foundations for Agentic AI Investigations from the Forensic Analysis of OpenClaw [0.0]
  Agentic Al systems are increasingly deployed as personal assistants and are likely to become a common object of digital investigations.<n>This paper presents an empirical study of OpenClaw a widely used single-agent assistant.<n>We classify and correlate these traces to assess their investigative value in a systematic way.
  arXiv  Detail & Related papers  (2026-04-07T08:35:22Z)
• Propose and Rectify: A Forensics-Driven MLLM Framework for Image Manipulation Localization [49.71303998618939]
  This paper presents a novel Propose-Rectify framework that bridges semantic reasoning with forensic-specific analysis.<n>Our framework ensures that initial semantic proposals are systematically validated and enhanced through concrete technical evidence, resulting in comprehensive detection accuracy and localization precision.
  arXiv  Detail & Related papers  (2025-08-25T12:43:53Z)
• Advancing Crime Linkage Analysis with Machine Learning: A Comprehensive Review and Framework for Data-Driven Approaches [0.0]
  Crime linkage is the process of analyzing criminal behavior data to determine whether a pair or group of crime cases are connected or belong to a series of offenses. This study aims to understand the challenges faced by machine learning approaches in crime linkage and to support foundational knowledge for future data-driven methods.
  arXiv  Detail & Related papers  (2024-10-30T18:22:45Z)
• The Quest for the Right Mediator: Surveying Mechanistic Interpretability Through the Lens of Causal Mediation Analysis [51.046457649151336]
  We propose a perspective on interpretability research grounded in causal mediation analysis.<n>We describe the history and current state of interpretability taxonomized according to the types of causal units (mediators) employed.<n>We discuss the pros and cons of each mediator, providing insights as to when particular kinds of mediators and search methods are most appropriate.
  arXiv  Detail & Related papers  (2024-08-02T17:51:42Z)
• A Comprehensive Analysis of the Role of Artificial Intelligence and Machine Learning in Modern Digital Forensics and Incident Response [0.0]
  The goal is to look closely at how AI and ML techniques are used in digital forensics and incident response. This endeavour digs far beneath the surface to unearth the intricate ways AI-driven methodologies are shaping these crucial facets of digital forensics practice. Ultimately, this paper underscores the significance of AI and ML integration in digital forensics, offering insights into their benefits, drawbacks, and broader implications for tackling modern cyber threats.
  arXiv  Detail & Related papers  (2023-09-13T16:23:53Z)
• Survey on Adversarial Attack and Defense for Medical Image Analysis: Methods and Challenges [64.63744409431001]
  We present a comprehensive survey on advances in adversarial attacks and defenses for medical image analysis. For a fair comparison, we establish a new benchmark for adversarially robust medical diagnosis models.
  arXiv  Detail & Related papers  (2023-03-24T16:38:58Z)
• A Principled Design of Image Representation: Towards Forensic Tasks [75.40968680537544]
  We investigate the forensic-oriented image representation as a distinct problem, from the perspectives of theory, implementation, and application. At the theoretical level, we propose a new representation framework for forensics, called Dense Invariant Representation (DIR), which is characterized by stable description with mathematical guarantees. We demonstrate the above arguments on the dense-domain pattern detection and matching experiments, providing comparison results with state-of-the-art descriptors.
  arXiv  Detail & Related papers  (2022-03-02T07:46:52Z)
• Towards Increasing Trust In Expert Evidence Derived From Malware Forensic Tools [0.0]
  The post of the Forensic Science Regulator was created in 2008. One of the key strategies deployed to achieve this is the push to incorporate a greater level of scientific conduct in the various fields of forensic practice. Currently there is no statutory requirement for practitioners to become accredited to continue working with the Criminal Justice System of England and Wales. The Forensic Science Regulator is lobbying the UK Government to make this mandatory.
  arXiv  Detail & Related papers  (2020-10-14T16:01:53Z)
• SoK: Blockchain Solutions for Forensics [8.185918509343818]
  This paper provides an overview and classification of the available blockchain-based digital forensic tools. We also offer an analysis of the various benefits and challenges of the symbiotic relationship between blockchain technology and the current digital forensics approaches.
  arXiv  Detail & Related papers  (2020-05-26T11:43:04Z)
• Anomalous Example Detection in Deep Learning: A Survey [98.2295889723002]
  This survey tries to provide a structured and comprehensive overview of the research on anomaly detection for Deep Learning applications. We provide a taxonomy for existing techniques based on their underlying assumptions and adopted approaches. We highlight the unsolved research challenges while applying anomaly detection techniques in DL systems and present some high-impact future research directions.
  arXiv  Detail & Related papers  (2020-03-16T02:47:23Z)
• Survey of Network Intrusion Detection Methods from the Perspective of the Knowledge Discovery in Databases Process [63.75363908696257]
  We review the methods that have been applied to network data with the purpose of developing an intrusion detector. We discuss the techniques used for the capture, preparation and transformation of the data, as well as, the data mining and evaluation methods. As a result of this literature review, we investigate some open issues which will need to be considered for further research in the area of network security.
  arXiv  Detail & Related papers  (2020-01-27T11:21:05Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.