Browse > Article
http://dx.doi.org/10.13089/JKIISC.2014.24.2.319

A Study on Edit Order of Text Cells on the MS Excel Files  

Lee, Yoonmi (Center for Information Security Technologies, Korea University)
Chung, Hyunji (Center for Information Security Technologies, Korea University)
Lee, Sangjin (Center for Information Security Technologies, Korea University)
Publication Information
Journal of the Korea Institute of Information Security & Cryptology / v.24, no.2, 2014 , pp. 319-325 More about this Journal
Abstract
Since smart phones or tablet PCs have been widely used recently, the users can create and edit documents anywhere in real time. If the input and edit flows of documents can be traced, it can be used as evidence in digital forensic investigation. The typical document application is the MS(Microsoft) Office. As the MS Office applications consist of two file formats that Compound Document File Format which had been used from version 97 to 2003 and OOXML(Office Open XML) File Format which has been used from version 2007 to now. The studies on MS Office files were for making a decision whether the file has been tampered or not through detection of concealed items or analysis of documents properties so far. This paper analyzed the input order of text cells on MS Excel files and shows how to figure out what cell is the last edited in digital forensic perspective.
Keywords
Digital Forensics; MS Excel; Document File Forensics; OOXML File Format; Compound Document File Format;
Citations & Related Records
Times Cited By KSCI : 1  (Citation Analysis)
연도 인용수 순위
1 Office 365 Could Boost Microsoft's Market Share In Shift To Cloud, http://seekingalpha.com/article/1437661-office-365-could-boost-microsofts-market-share-inshift-to-cloud
2 Microsoft Corporation, "Office Open XML File Formats," Standard ECMA-376, 4th Edition, Dec. 2012.
3 Zhangjie Fu, Xingming Sun, Yuling Liu and Bo Li, "Forensic investigation of OOXML format documents," Digital Investigation, vol 8, issue 1, pp.48-55, Jul. 2011.   DOI   ScienceOn
4 JiHye Youn, JungHeum Park and Sangjin Lee, "Methods for Investigating of Edit History about MS PowerPoint Files That Using the OOXML Formats," Journal of The Korea Institute of information Security & Cryptology, C19(4), pp.215-224, Aug. 2012.   과학기술학회마을   DOI   ScienceOn
5 Bora Park, Jungheum Park and Sangjin Lee, "Data concealment and detection in Microsoft Office 2007 files," Digital Investigation, vol 5, issues 3-4, pp.104-114, Mar. 2009.   DOI   ScienceOn
6 D. J. Power, A Brief History of Spreadsheets, http://dssresources.com/history/sshistory.html
7 Hyukdon Kwon, Yeog Kim, Sangjin Lee and Jongin Lim, "A Tool for the Detection of Hidden Data in Microsoft Compound Document File Format," International Conference on Information Science and Security, pp.141-146, Jan. 2008
8 Microsoft Corporation, "[MS-XLS] : Excel Binary File Format (.xls) Structure," Feb. 2013
9 Microsoft Corporation, The Microsoft Office Visualization Tool (OffVis) Fact Sheet, http://www.microsoft.com/en-us/download/details.aspx?id=2096