Name
Abstract | ||
|---|---|---|
The ability to detect fragments of deleted image files and to reconstruct these image files from all available fragments on disk is an important activity in the field of digital forensics. Although reconstruction of image files from the file fragments on disk can be accomplished by simply comparing the content of sectors on disk with the content of known files, this brute-force approach can be time consuming. This paper presents results from research into the use of field programmable gate arrays (FPGAs) in detecting specific image file byte patterns in disk clusters. Unique identifying pattern for each disk sector is compared against patterns in known images. A pattern match indicates the potential presence of an image and flags the disk sector for further in-depth examination to confirm the match. The FPGA-based implementation outperforms the software implementation by a significant margin. |
Year | DOI | Venue |
|---|---|---|
2007 | 10.1109/HICSS.2007.244 | HICSS |
Keywords | Field | DocType |
signature patterns,image file fragments,hardware-assisted scanning,field programmable gate array,known file,fpga-based implementation,specific image file byte,known image,disk sector,image file,pattern match,file fragment,disk cluster,digital forensics,digital signatures,field programmable gate arrays,pattern matching | Byte,Digital forensics,Computer science,Field-programmable gate array,Image file formats,Digital signature,Storage management,Computer hardware,Pattern matching,Software implementation | Conference |
ISBN | Citations | PageRank |
0-7695-2755-8 | 5 | 1.07 |
References | Authors | |
6 | 1 | |
Name | Order | Citations | PageRank |
|---|---|---|---|
| Yoginder S. Dandass | 1 | 147 | 11.74 |