# Systematic Review: Anti-Forensic Computer Techniques
## 4 Results
### Weaknesses and Anti-Forensic Use Cases
#### 4.1.2 Weaknesses and Anti-Forensic Use Cases: Specific Techniques  
This section gathers the works whose purpose is to explain specific anti-forensic techniques, applied in very diverse fields, such as the Firefox browser in the study by [PERSON] et al. [140] or the secure and selective deletion of evidence in the article by [PERSON] et al. [141].  
[PERSON] et al. [142] aim to present some of the current anti-forensic approaches, along with some applicable solutions and some available tools.  
[PERSON] et al. [143] propose a new notion of secure disguisable symmetric encryption schemes, which captures the idea that the attacker can decrypt a cipher text he encrypted to different meaningful values when different keys are put to the decryption algorithm.  
[PERSON] et al. [144] proposes \"HIDEINsIDE\", a new method for hiding data in unused disk space (slack space). This proposed method is an anti-forensic as well as a steganographic technique.  
[PERSON] et al. [145] examine the tactics of anti-forensic malicious software, which aims to eliminate or alter digital evidence to hinder investigations. This is the first article in a series exploring these software tactics.  
[PERSON] [146] explores, in general, the evolving landscape of anti-forensics techniques employed by criminals and malware, alongside countermeasures used for forensic analysis.  
[PERSON] [147] presents an introduction to encryption technology and the threat it poses, as well as the attacks used to break encryption and the techniques used to hide and destroy data.  
[PERSON] et al. [148] propose \"FROST\", an innovative asynchronous \"Digital Dead Drop\" that is resistant to detection and data loss, with adjustable fault tolerance. This system facilitates the secure and clandestine exchange of information asynchronously, guaranteeing the operational security and integrity of the exchanged data.  
[PERSON] et al. [149] present a simple encryption scheme using AES and XOR. A tool to implement this scheme is described, which allows for the encryption of files and the modification of timestamps.  
[PERSON] et al. [150] develop guidelines for digital forensic investigators, equipping them with knowledge of anti-forensic techniques of data concealment, as well as the tools with which to counteract them and successfully recover hidden digital evidence.  
[PERSON] [151] explores how encrypted data on a hard drive can influence forensic investigations. The paper discusses how an attacker can manipulate analysts and judges using malicious cryptographic techniques to wrongfully incriminate innocent people.  
The articles discuss a range of techniques used to hinder digital forensic investigation and prevent evidence recovery [140; 142; 145]. Some methods focus on removing or manipulating traces of digital activity [140; 142], while others propose techniques with which to hide information in slack space for anti-forensic and covert communication purposes [144; 148]. Privacy protection through the secure erasure of information and encryption with anti-forensic techniques that make recovery by attackers difficult is also a central theme in [141; 143]. The use of encryption to hinder forensic investigation is also addressed from different angles in [149; 151]. Article [149] proposes double encryption, while [151] raises the use of encryption for malicious purposes to confuse investigators.  
Regarding the contributions they offer, several articles propose novel methods of hiding information and hindering forensic investigation in general [144; 148; 149], while article [151] raises an interesting discussion on the malicious use of cryptography in the forensic context.