Difference between pages "VPN" and "Document Metadata Extraction"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
(VPNs and anonymity)
 
m
 
Line 1: Line 1:
{{expand}}
+
Here are tools that will extract metadata from document files.
  
'''VPN''' (Virtual Private Network) is a class of technology that allows remote machines to interconnect by creating a virtual network layer, on top of the physical network connection, that in practice is used to maintain the privacy of data shared over this virtual network connection (essentially all VPN toolsets use some form of packet-level [[encryption]]). There are many different modern implementations of the VPN concept itself, to the point where categorizing them together becomes somewhat questionable.
+
=Office Files=
  
== Overview ==
+
; [[antiword]]
 +
: http://www.winfield.demon.nl/
  
Virtual Private Networks are deployed by organizations and individuals for different purposes:
+
; [[catdoc]]
 +
: http://www.45.free.net/~vitus/software/catdoc/
  
* Protecting confidential information in organizations, when connecting geographically distant office networks;
+
; [[laola]]
* Providing "work from home" or traveling employees with secure remote access to office network resources;
+
: http://user.cs.tu-berlin.de/~schwartz/pmh/index.html
* Securing general Internet traffic in particularly insecure network usage settings (e.g. open wireless networks);
+
* Encrypting all internet traffic to and from a home connection, to prevent ISP packet shaping and/or surveillance (i.e. Torrentfreedom Privacy, www.torrentfreedom.net).
+
  
When used for Internet connectivity, VPN service also acts as a form of proxy and protects the user's physical IP address from public display. As a result, they are an increasingly popular form of anonymity protection for internet users. While there are some concerns that the availability of anonymous connectivity would encourage true fraud, in practice those engaged in commercial fraud online use other, existing tools to keep their activities from being discovered - there is no known case of a commercial VPN service being used to further a fraudulent activity online, thus far.
+
; [[word2x]]
 +
: http://word2x.sourceforge.net/
  
== VPNs and anonymity ==
+
; [[wvWare]]
 +
: http://wvware.sourceforge.net/
 +
: Extracts metadata from various [[Microsoft]] Word files ([[doc]]). Can also convert doc files to other formats such as HTML or plain text.
  
* Log files: VPN services may maintain usage logs which could then be used to track the activities of the user of those services, after the fact. However some commercial consumer-oriented VPN services specifically configure their servers not to retain any logfile information of this type. An example is [[Cryptocloud_VPN]].
+
=PDF Files=
  
* Protocol stack: [[TCP timestamps]] and IP ID values may be used in correlating incoming (encrypted) and outgoing (unencrypted) network streams. This type of "traffic analysis" can, in theory, be used to gather information about a fully-encrypted VPN connection - in practice, there are no known examples of traffic analysis being used against commercial VPN service providers.
+
; [[xpdf]]
 +
: http://www.foolabs.com/xpdf/
 +
: [[pdfinfo]] (part of the [[xpdf]] package) displays some metadata of [[PDF]] files.
  
== See Also ==
+
=Images=
  
* [[Cryptocloud VPN]]
+
; [[jhead]]
* [[Tor]]
+
: http://www.sentex.net/~mwandel/jhead/
* [[Proxy server]]
+
: Displays or modifies [[Exif]] data in [[JPEG]] files.
  
[[Category:Anti-Forensics]]
+
; [[vinetto]]
[[Category:Network Forensics]]
+
: http://vinetto.sourceforge.net/
[[Category:Encryption]]
+
: Examines [[Thumbs.db]] files.
 +
 
 +
;[[libexif]]
 +
: http://sourceforge.net/projects/libexif EXIF tag Parsing Library
 +
 
 +
=General=
 +
; [[Metadata Assistant]]
 +
: http://www.payneconsulting.com/products/metadataent/
 +
 
 +
: [[hachoir|hachoir-metadata]]
 +
; Extraction tool, part of '''[[Hachoir]]''' project
 +
 
 +
[[Category::Tools]]

Revision as of 19:35, 4 October 2008

Here are tools that will extract metadata from document files.

Office Files

antiword
http://www.winfield.demon.nl/
catdoc
http://www.45.free.net/~vitus/software/catdoc/
laola
http://user.cs.tu-berlin.de/~schwartz/pmh/index.html
word2x
http://word2x.sourceforge.net/
wvWare
http://wvware.sourceforge.net/
Extracts metadata from various Microsoft Word files (doc). Can also convert doc files to other formats such as HTML or plain text.

PDF Files

xpdf
http://www.foolabs.com/xpdf/
pdfinfo (part of the xpdf package) displays some metadata of PDF files.

Images

jhead
http://www.sentex.net/~mwandel/jhead/
Displays or modifies Exif data in JPEG files.
vinetto
http://vinetto.sourceforge.net/
Examines Thumbs.db files.
libexif
http://sourceforge.net/projects/libexif EXIF tag Parsing Library

General

Metadata Assistant
http://www.payneconsulting.com/products/metadataent/
hachoir-metadata
Extraction tool, part of Hachoir project

[[Category::Tools]]