International Journal of Computer Applications |
Foundation of Computer Science (FCS), NY, USA |
Volume 184 - Number 32 |
Year of Publication: 2022 |
Authors: Carto Ardiyanto, Imam Riadi |
![]() |
Carto Ardiyanto, Imam Riadi . Comparison of Freeze Software in Anti Forensic using National Institute of Standard and Technology Method. International Journal of Computer Applications. 184, 32 ( Oct 2022), 41-47. DOI=10.5120/ijca2022922395
The development of technology brings rapid changes in the fields of software, hardware and brain ware. Solid State Drive (SSD) is generally used as an operating system container because it is considered more efficient. To reduce maintenance costs for frequently used software such as Deep Freeze, Shadow Defender and Reboot Restore Rx. But software like this can also be exploited for computer crimes, such as removing original data so that an investigator can't find the evidence, he's looking for a trial. it is commonly called Anti-forensic. Previous research on one of the software freezes turned out to be able to inhibit investigators from working. However, there is no definite comparison for each software freeze. To reveal these facts, research was made that is able to display the results of the analysis of the scenarios that have been designed using digital forensic science.The objects of this research are three virtual OS that have been manipulated in the form of steganography in freeze mode Deep Freeze, Shadow Defender and Reboot Restore RX. Methods in collecting data are literature study, experimental and simulation techniques. The stages of the research carried out were starting from looking for literature references, designing case simulations, analyzing simulation and research needs, running case simulations. Next, look for digital evidence to find the third difference in the success or effectiveness of software freezing to become anti-forensic using the National Institute of Standards and Technology method with stages in the form of collection, examination, analysis, and reporting. The results obtained were, in the search for digital evidence, the examination process did not go well. The success rate of software freeze in inhibiting the examination process on a virtual operating system is very high. The operating system installed with the Deep Freeze application has an effectiveness of 93.23%, the Shadow Defender application is 90%, and the Reboot Restore RX application is 100%. Shows software freezes are proven to be effective for investigations on storage forensics cases