Dr Sean McKeown S.McKeown@napier.ac.uk
Lecturer
Sub-file Hashing Strategies for Fast Contraband Detection
McKeown, Sean; Russell, Gordon; Leimich, Petra
Authors
Dr Gordon Russell G.Russell@napier.ac.uk
Associate Professor
Dr Petra Leimich P.Leimich@napier.ac.uk
Lecturer
Abstract
Traditional digital forensics processes do not scale well with the huge quantities of data present in a modern investigation, resulting in large investigative backlogs for many law enforcement agencies. Data reduction techniques are required for fast and effective digital forensics triage, and to reduce the time taken to conduct an investigation. This work explores the potential of sub-file cryptographic hashing strategies, where small fragments of files are hashed in lieu of processing the file in its entirety, for contraband detection. Results show that subfile hashing techniques perform well, particularly on solid state media, while also retaining a high degree of discriminating power. Such strategies may offer an opportunity to take advantage of the performance characteristics of non-mechanical media, streamlining future investigations and greatly reducing investigation times.
Citation
McKeown, S., Russell, G., & Leimich, P. (2018). Sub-file Hashing Strategies for Fast Contraband Detection. In 2018 International Conference on Cyber Security and Protection of Digital Services (Cyber Security). https://doi.org/10.1109/CyberSecPODS.2018.8560680
Conference Name | IEEE International Conference on Cyber Security and Protection of Digital Services (Cyber Security 2018) |
---|---|
Conference Location | Glasgow, Scotland |
Start Date | Jun 11, 2018 |
End Date | Jun 12, 2018 |
Acceptance Date | Mar 31, 2018 |
Publication Date | Dec 6, 2018 |
Deposit Date | May 24, 2018 |
Publicly Available Date | Dec 6, 2018 |
Publisher | Institute of Electrical and Electronics Engineers |
Book Title | 2018 International Conference on Cyber Security and Protection of Digital Services (Cyber Security) |
ISBN | 9781538646847 |
DOI | https://doi.org/10.1109/CyberSecPODS.2018.8560680 |
Keywords | sub-file signatures, partial-file analysis, hashing strategies, digital forensics, cryptographic hashing |
Public URL | http://researchrepository.napier.ac.uk/Output/1160940 |
Files
Sub-file Hashing Strategies for Fast Contraband Detection.
(202 Kb)
PDF
Copyright Statement
© 2018 IEEE
Related Outputs
Reducing the Impact of Network Bottlenecks on Remote Contraband Detection
(2018)
Conference Proceeding
You might also like
Reducing the Impact of Network Bottlenecks on Remote Contraband Detection
(2018)
Conference Proceeding
Fingerprinting JPEGs With Optimised Huffman Tables
(2018)
Journal Article
Fast Filtering of Known PNG Files Using Early File Features
(2017)
Conference Proceeding
Editorial: TLAD 2015
(2015)
Conference Proceeding
From crime to court - an experience report of a digital forensics group project module.
(2014)
Presentation / Conference
Downloadable Citations
About Edinburgh Napier Research Repository
Administrator e-mail: repository@napier.ac.uk
This application uses the following open-source libraries:
SheetJS Community Edition
Apache License Version 2.0 (http://www.apache.org/licenses/)
PDF.js
Apache License Version 2.0 (http://www.apache.org/licenses/)
Font Awesome
SIL OFL 1.1 (http://scripts.sil.org/OFL)
MIT License (http://opensource.org/licenses/mit-license.html)
CC BY 3.0 ( http://creativecommons.org/licenses/by/3.0/)
Powered by Worktribe © 2024
Advanced Search