Digital Anti-Forensics Research: The Next 10 Years

Schneider J, Ramming F, Eichhorn M, Pugliese G, Hargreaves C, Gruber J, Schilling J, Geus J, Mayer K, Uhlenbrock L, Voigt L, Breitinger F (2026)

Publication Type: Journal article

Publication year: 2026

Journal

Original Authors: Janine Schneider, Florian Ramming, Maximilian Eichhorn, Gaston Pugliese, Christopher Hargreaves, Jan Gruber, Joschua Schilling, Julian Geus, Kevin Mayer, Lea Uhlenbrock, Lena Lucia Voigt, Frank Breitinger

Article Number: 3846198

DOI: 10.1145/3846198

Abstract

Anti-forensics refers to techniques designed to obstruct forensic analysis. While such methods are increasingly used by cybercriminals, they also provide valuable insights for researchers by revealing weaknesses in forensic tools and thereby contributing to their robustness. Despite repeated attempts to define anti-forensics, the concept remains fragmented and inconsistently described across the literature. In addition, it raises ethical questions regarding appropriate research practices and, in some cases, the legitimacy of the field itself. This article examines the evolution of anti-forensics from a collection of technical challenges into an emerging research field and discusses key directions for its development over the next decade. Based on an analysis of 123 articles, we present insights into common techniques, attack vectors, and their distribution across forensic subdomains. Furthermore, we identify prevalent research methods in anti-forensics and counter-anti-forensics, along with their motivations and application contexts. Finally, we reflect on the implications of these findings for future research and propose directions towards a more coherent and ethically grounded understanding of anti-forensics.

Authors with CRIS profile

Additional Organisation(s)

Involved external institutions

CISPA − Helmholtz-Zentrum für Informationssicherheit Germany (DE) Universität Augsburg Germany (DE) Karlsruhe Institute of Technology (KIT) Germany (DE) University of Oxford United Kingdom (GB) Technische Hochschule Rosenheim Germany (DE)

How to cite

APA:

Schneider, J., Ramming, F., Eichhorn, M., Pugliese, G., Hargreaves, C., Gruber, J.,... Breitinger, F. (2026). Digital Anti-Forensics Research: The Next 10 Years. Digital Threats: Research and Practice. https://doi.org/10.1145/3846198

MLA:

Schneider, Janine , et al. "Digital Anti-Forensics Research: The Next 10 Years." Digital Threats: Research and Practice (2026).

BibTeX: Download