Fast Filtering of Known PNG Files Using Early File Features
- Submitting institution
-
Edinburgh Napier University
- Unit of assessment
- 11 - Computer Science and Informatics
- Output identifier
- 1110540
- Type
- E - Conference contribution
- DOI
-
-
- Title of conference / published proceedings
- Proceedings of the Conference on Digital Forensics, Security and Law
- First page
- 107
- Volume
- -
- Issue
- -
- ISSN
- 1931-7379
- Open access status
- Compliant
- Month of publication
- December
- Year of publication
- 2017
- URL
-
-
- Supplementary information
-
https://commons.erau.edu/adfsl/2017/papers/1/
- Request cross-referral to
- -
- Output has been delayed by COVID-19
- No
- COVID-19 affected output statement
- -
- Forensic science
- No
- Criminology
- No
- Interdisciplinary
- No
- Number of additional authors
-
2
- Research group(s)
-
-
- Citation count
- -
- Proposed double-weighted
- No
- Reserve for an output with double weighting
- No
- Additional information
- This work is significant in that it generates signatures for particular files based on the combination of file encoding and metadata features with potentially low entropy, whereas most work in this area either uses a cryptographic hash, or only considers high entropy features (e.g. sdhash). The research demonstrates the potential, in some circumstances, for efficient and highly accurate file signature creation, which may be used as part of a pre-filtering scheme to reduce investigation processing times. This was the first work which suggested that intra file sub-sampling and SSD performance characteristics are a valid route to improve forensic processing performance.
- Author contribution statement
- -
- Non-English
- No
- English abstract
- -