메뉴 건너뛰기
소속 기관 / 학교 인증
인증하면 논문, 학술자료 등을  무료로 열람할 수 있어요.
한국대학교, 누리자동차, 시립도서관 등 나의 기관을 확인해보세요
(국내 대학 90% 이상 구독 중)
고객센터 ENG
주제분류

논문 기본 정보

저자정보
(Korea University) (Kwangwoon University)
저널정보
대한전자공학회 IEIE Transactions on Smart Processing & Computing IEIE Transactions on Smart Processing & Computing Vol.15 No.4
오류 신고하기

피인용 0

검색

    초록·키워드

    Timeline reconstruction is fundamental to digital forensic investigations, as timestamps are critical for establishing the chronological sequence of events. However, several malware and adversaries exploit inherent deficiencies of this procedure by employing timestamp manipulation techniques to conceal malicious activities and mislead forensic examinations. Therefore, research into timestamp forgery is essential. While existing literature focuses on individual tools or detection methods, there is a lack of comprehensive research integrating these perspectives. This study investigates forgery techniques and tools– such as XTST, SetMACE, and Timestomp–incorporating those utilized by prominent threat actors such as APT29 and the Lazarus Group. Furthermore, we classify detection methodologies and evaluate them across four practical scenarios. By analyzing their respective strengths and limitations, this paper provides a strategic roadmap for future research in timestamp forensics.

    최근 본 자료 전체보기