Digital Anti-Forensics Research: The Next 10 Years

Abstract

Anti-forensics refers to techniques designed to obstruct forensic analysis. While such methods are increasingly used by cybercriminals, they also provide valuable insights for researchers by revealing weaknesses in forensic tools and thereby contributing to their robustness. Despite repeated attempts to define anti-forensics, the concept remains fragmented and inconsistently described across the literature. In addition, it raises ethical questions regarding appropriate research practices and, in some cases, the legitimacy of the field itself. This article examines the evolution of anti-forensics from a collection of technical challenges into an emerging research field and discusses key directions for its development over the next decade. Based on an analysis of 123 articles, we present insights into common techniques, attack vectors, and their distribution across forensic subdomains. Furthermore, we identify prevalent research methods in anti-forensics and counter-anti-forensics, along with their motivations and application contexts. Finally, we reflect on the implications of these findings for future research and propose directions towards a more coherent and ethically grounded understanding of anti-forensics.