首页> 美国政府科技报告 >New XML-Based Files: Implications for Forensics
【24h】

New XML-Based Files: Implications for Forensics

机译:新的基于XmL的文件:对取证的影响

获取原文

摘要

For more than 20 years, programs such as Microsoft Word have stored their documents in binary file formats. That s changing as Microsoft, Sun Microsystems, and other developers migrate to new XML-based formats for document files. Document files are of critical interest to forensic practitioners because of the data they contain; they are also a rich topic for forensic research. Although most investigations concern themselves solely with a document s surface content, some examinations dive deeper, examining the metadata or deleted material that s still present in the file. Investigators can, for instance, use metadata to identify individuals potentially responsible for unauthorized file modification, establish text plagiarization, or even indicate falsification of evidence. Unfortunately, metadata can also be modified to implicate innocent people and the ease of modifying these new files means that it s far easier to make malicious modifications that are difficult (if not impossible) to detect. With so many aspects to consider, we present a forensic analysis of the two rival XML-based office document file formats: the Office Open XML (OOX) that Microsoft adopted for its Office software suite and the OpenDocument Format (ODF) used by Sun is Open Office software. We detail how forensic tools can exploit features in these file formats and show how these formats could cause problems for forensic practitioners. For additional information on the development and increased use of these two file formats, see the Background sidebar.

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号