Security and privacy issues in the Portable Document Format

Journal of Systems and Software

Volumn 83, Issue 10, 2010, Pages 1813-1822

  Castiglione, Aniello ^a   De Santis, Alfredo ^a   Soriente, Claudio ^a,b  

^a UNIVERSITY OF SALERNO   (Italy)

^b UNIVERSIDAD POLITÉCNICA DE MADRID   (Spain)

Author keywords

Compound document format; Digital forensics; Digital investigations; Document security; Electronic document; Information forensics; Information leakage; Portable Document Format (PDF); Privacy; Security

Indexed keywords

COMPOUND DOCUMENT; DIGITAL FORENSICS; DIGITAL INVESTIGATION; DOCUMENT SECURITY; ELECTRONIC DOCUMENT; INFORMATION FORENSICS; INFORMATION LEAKAGE; PORTABLE DOCUMENT FORMATS; PRIVACY; SECURITY;

ELECTRONIC CRIME COUNTERMEASURES; ELECTRONIC DOCUMENT EXCHANGE; PRINTING MACHINERY; PROBABILITY DISTRIBUTIONS; PROGRAM DOCUMENTATION; WORD PROCESSING;

SECURITY OF DATA;

EID: 77956061150     PISSN: 01641212     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.jss.2010.04.062     Document Type: Article

References (39)

1. Adobe, 2009. Security Advisory for Adobe Reader and Acrobat. http://www.adobe.com/support/security/advisories/apsa09-07.html (December 15 2009).
2. Adobe, 2010. Security Updates Available for Adobe Reader and Acrobat. http://www.adobe.com/support/security/bulletins/apsb10-07.html (February 17 2010).
3. Adobe Acrobat 7.0, 2005. Acrobat JavaScript Scripting Reference. http://partners.adobe.com/public/developer/en/acrobat/sdk/AcroJS.pdf (June 2005).
4. Adobe Acrobat SDK v. 8.1, 2007. JavaScript for Acrobat API Reference. http://www.adobe.com/devnet/acrobat/pdfs/js-api-reference.pdf (April 2007).
5. Adobe Inc., 2010. Adobe 9 Pro Extended, Removing sensitive content. http://help.adobe.com/en-US/Acrobat/9.0/3D/WS4E397D8A-B438-4b93-BB5F- E3161811C9C0.w.html (February 2010).
6. Adobe Solutions Network, 2005. Acrobat JavaScript Scripting Guide. http://partners.adobe.com/public/developer/en/acrobat/sdk/pdf/javascript/ AcroJSGuide.pdf (September 2005).
7. Adobe Solutions Network, 2005. Adobe Acrobat 7.0: PDF Open Parameters. http://partners.adobe.com/public/developer/en/acrobat/PDFOpenParameters.pdf (July 2005).
8. Adobe Systems Inc., 1999. PostScript Language Reference, Third Edition. http://partners.adobe.com/public/developer/ps/index-specs.html (February 1999).
9. Adobe Systems Inc., 2009. Adobe Portable Document Format. http://www.adobe.com/products/acrobat/adobepdf.html (Last updated December 2009).
10. Adobe Systems Inc., 2009. Latest Product Updates. http://www.adobe.com/ downloads/updates/ (Last updated December 2009).
11. Adobe Systems Inc., 2009. Security bulletins and advisories. http://www.adobe.com/support/security/ (Last updated December 2009).
12. Adobe Systems Inc., 2010. Adobe PDF Reference Archives. http://www.adobe.com/devnet/pdf/pdf-reference-archive.html (Last updated January 2010).
13. Adobe Systems Inc., 2010. Examine a PDF for hidden content. http://help.adobe.com/en-US/Acrobat/8.0/Professional/help.html?content= WS7E9FA147-10E3-4391-9CB6-6E44FBDA8856.html.
14. AIIM, 2009. PDF Reference Bibliography. http://www.aiim.org/standards/ article.aspx?ID=33223 (Last updated December 2009).
15. Avira GmbH, 2008. Avira issues a warning about polymorphous harmful PDFs. http://www.avira.com/en/security-news/polymorphous-harmful-pdfs.html (November 2008).
16. S.R. Bagley, D.F. Brailsford, and J.A. Ollis Extracting reusable document components for variable data printing DocEng'07: Proceedings of the ACM Symposium on Document Engineering 2007 ACM Press New York, NY, USA 44 52
17. S. Byers Information leakage caused by hidden data in published documents IEEE Security and Privacy 2 2 2004 23 27
18. A. Castiglione, A. De Santis, and C. Soriente Taking advantages of a disadvantage: digital forensics and steganography using document metadata Journal of Systems and Software, Elsevier 80 2007 750 764
19. H. Chao, and J. Fan Layout and Content Extraction for PDF Documents Lecture Notes in Computer Science LNCS 3163 2004 213 224
20. Electronic Frontier Foundation, 2010. How Unique - and Trackable - Is Your Browser? http://panopticlick.eff.org/ (January 2010).
21. Elsevier B.V., 2009. Customer Support, Reviewer Attachments Not Sanitised by EES. http://epsupport.elsevier.com/al/12/1/article.aspx?aid=2090 tab=browse bt=4n (December 2009).
22. Foxit Software Company, 2010. Foxit Reader. http://www.foxitsoftware.com (February 2010).
23. F-Secure Corporation, 2001. F-Secure Virus Descriptions: PDF Worm. http://www.f-secure.com/v-descs/pdf.shtml (August 2001).
24. R.P. Futrelle, M. Shao, C. Cieslik, and A.E. Grimes Extraction, layout analysis and classification of diagrams in PDF documents ICDAR'03: Proceedings of the Seventh International Conference on Document Analysis and Recognition 2003 IEEE Computer Society Washington, DC, USA 1007 1013
25. Gemal, H., 2010. Browser Spy. http://www.browserspy.dk/ (January 2010).
26. J.C. King A format design case study: PDF HYPERTEXT'04: Proceedings of the Fifteenth ACM Conference on Hypertext and Hypermedia 2004 ACM Press New York, NY, USA 95 97
27. McKinley, K.S., 2008. Improving Publication Quality by Reducing Bias with Double-Blind Reviewing and Author Response, ACM SIGPLAN Notices. http://www.cs.utexas.edu/users/mckinley/notes/blind.html (August 2008).
28. National Institute of Standards and Technology (NIST), 2002. The Keyed-Hash Message Authentication Code (HMAC) (FIPS PUB 198). http://csrc.nist.gov/publications/fips/fips198/fips-198a.pdf (March 2002).
29. PDF Standard Committees, 2010. PDF Standards Implementations Wiki. http://pdf.editme.com/ (Last updated February 2010).
30. PDF Working Group, 2002. PDF-Archive Draft Meeting Minutes. http://www.aiim.org/documents/standards/pdf-a2003-001-dec-min.pdf (December 2002).
31. Shankland, S., 2001. New virus travels in PDF files. http://www.news.com/ New+virus+travels+in+PDF+files/2100-1001-3-271267.html (August 2001).
32. R.T. Snodgrass Editorial: single versus double-blind reviewing ACM Transactions on Database Systems 32 1 2007 1
33. The Evince Team, 2009. Evince - Simply a Document Viewer. http://www.gnome.org/projects/evince/ (Last updated September 2009).
34. The Institute of Electrical and Electronics Engineers, 2008. IEEE PDF-eXpress. http://www.pdf-express.org/ (August 2008).
35. The KPDF Team, 2008. KPDF Reader. http://kpdf.kde.org/ (Last updated August 2008).
36. United States Computer Emergency Readiness Team (US-CERT), 2000. Vulnerability Note VU#31554. http://www.kb.cert.org/vuls/id/31554 (November 2000).
37. Wikipedia the Online Encyclopedia, 2009. The Calipari Incident. http://en.wikipedia.org/wiki/Nicola-Calipari/, http://en.wikipedia.org/wiki/ Rescue-of-Giuliana-Sgrena/ (Last updated December 2009).
38. Wikipedia the Online Encyclopedia, 2010. Peer Review Process. http://en.wikipedia.org/wiki/Peer-review (Last updated January 2010).
39. S. Zhong, X. Cheng, and T. Chen Data hiding in a kind of PDF texts for secret communication International Journal of Network Security 4 1 2007 17 26