ELI5: Explain Like I'm 5

Anti–computer forensics

Anti–computer forensics refers to a set of techniques used by people who want to hide their actions on a computer or make it difficult for others to find evidence of their activities. Just like when you play hide-and-seek, these people want to hide from the people who are trying to find them.

To understand anti-computer forensics, we first need to know what computer forensics is. Computer forensics is like being a detective but for computers. It involves looking for clues and evidence on a computer to figure out what someone has done or what has happened. It's just like looking for footprints or fingerprints when someone goes missing.

Now, some people don't want others to find out what they have done on a computer. They want to hide their footprints and fingerprints, so they use anti-computer forensic techniques. These techniques can make it very hard for the forensic experts to find any evidence. It's like trying to find clues when someone has erased all the footprints and cleaned all the fingerprints.

Here are a few examples of techniques used in anti-computer forensics:

1. Encryption: Imagine your secret diary. You write all your secret thoughts in it, and you don't want anyone else to read them. So you use a special lock to protect your diary. Similarly, encryption is like a lock for computer files. It makes the files unreadable for anyone who doesn't have the right key. People who want to hide their activities can encrypt their files, and even if someone finds them, they won't be able to understand what's inside.

2. File deletion: When you accidentally break a toy, you might throw it away or hide it so that nobody finds out. On a computer, if you want to hide something, you can delete it. But remember, just like magic, even if you can't see it anymore, it's still somewhere. Forensic experts can sometimes find these hidden files and recover them.

3. Data hiding: Imagine you have a secret treasure box in your room, but nobody can see it because it's hidden under your bed. Similar to that, people can hide important information inside other files or hide entire files inside other files. This makes it very difficult for forensic experts to find the hidden stuff.

4. Steganography: This is like hiding a secret message in a picture. Let's say you have a picture of a cute cat, but inside that picture, there is secretly a map to a hidden treasure. Only if you know the secret, you will be able to find it. People can use special techniques to hide secret information within innocent-looking files or pictures, making it almost impossible to detect.

These are just a few examples of what people can do to hide their activities on a computer. The goal of anti-computer forensics is to make it very hard for forensic experts to find evidence and understand what someone has done. But remember, just like real detectives, the forensic experts can be very smart too and often find ways to uncover the hidden secrets.