Abstract
In recent years, as electronic files include personal records and business activities, these files can be used as important evidences in a digital forensic investigation process. In general, the data that can be verified using its own application programs is largely used in the investigation of document files. However, in the case of the PDF file that has been largely used at the present time, certain data, which include the data before some modifications, exist in electronic document files unintentionally. Because such residual information may present the writing process of a file, it can be usefully used in a forensic viewpoint. This paper introduces why the residual information is stored inside the PDF file and explains a way to extract the information. In addition, we demonstrate the attributes of PDF files can be used to hide data.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
References
Davis, M.R.: Faith in the Format: Unintentional Data Hiding in PDFs. 757 Labs.com (2008)
Park, J., Lee, S.: Forensic investigation of Microsoft PowerPoint files. Digital Investigation 6, 16–24 (2009)
Adobe Systems.: Document management - Portable document format Part 1: PDF 1.7, 1st edn. (2008)
Zhong, S., Cheng, X., Chen, T.: Data Hiding in a Kind of PDF Texts for Secret Communication. International Journal of Network Security 4(1), 17–26 (2007)
Stevens, D.: Solving a Little PDF Puzzle (2008), http://blog.didierstevens.com/2008/05/07/solving-a-little-pdf-puzzle/
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2011 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Chung, H., Park, J., Lee, S. (2011). Forensic Analysis of Residual Information in Adobe PDF Files. In: Park, J.J., Yang, L.T., Lee, C. (eds) Future Information Technology. Communications in Computer and Information Science, vol 185. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-642-22309-9_12
Download citation
DOI: https://doi.org/10.1007/978-3-642-22309-9_12
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-642-22308-2
Online ISBN: 978-3-642-22309-9
eBook Packages: Computer ScienceComputer Science (R0)