Skip to main content

Research Repository

Advanced Search

Sub-file Hashing Strategies for Fast Contraband Detection

McKeown, Sean; Russell, Gordon; Leimich, Petra

Authors



Abstract

Traditional digital forensics processes do not scale well with the huge quantities of data present in a modern investigation, resulting in large investigative backlogs for many law enforcement agencies. Data reduction techniques are required for fast and effective digital forensics triage, and to reduce the time taken to conduct an investigation. This work explores the potential of sub-file cryptographic hashing strategies, where small fragments of files are hashed in lieu of processing the file in its entirety, for contraband detection. Results show that subfile hashing techniques perform well, particularly on solid state media, while also retaining a high degree of discriminating power. Such strategies may offer an opportunity to take advantage of the performance characteristics of non-mechanical media, streamlining future investigations and greatly reducing investigation times.

Presentation Conference Type Conference Paper (Published)
Conference Name IEEE International Conference on Cyber Security and Protection of Digital Services (Cyber Security 2018)
Start Date Jun 11, 2018
End Date Jun 12, 2018
Acceptance Date Mar 31, 2018
Publication Date Dec 6, 2018
Deposit Date May 24, 2018
Publicly Available Date Dec 6, 2018
Publisher Institute of Electrical and Electronics Engineers
Book Title 2018 International Conference on Cyber Security and Protection of Digital Services (Cyber Security)
ISBN 9781538646847
DOI https://doi.org/10.1109/CyberSecPODS.2018.8560680
Keywords sub-file signatures, partial-file analysis, hashing strategies, digital forensics, cryptographic hashing
Public URL http://researchrepository.napier.ac.uk/Output/1160940
Contract Date May 24, 2018

Files

Sub-file Hashing Strategies for Fast Contraband Detection. (202 Kb)
PDF

Copyright Statement
© 2018 IEEE









You might also like



Downloadable Citations