The Community for Technology Leaders
Green Image
Issue No. 12 - Dec. (2012 vol. 45)
ISSN: 0018-9162
pp: 28-35
Joel Young , Naval Postgraduate School
Kristina Foster , Naval Postgraduate School
Simson Garfinkel , Naval Postgraduate School
Kevin Fairbanks , Johns Hopkins University
ABSTRACT
Using an alternative approach to traditional file hashing, digital forensic investigators can hash individually sampled subject drives on sector boundaries and then check these hashes against a prebuilt database, making it possible to process raw media without reference to the underlying file system.
INDEX TERMS
Digital forensics, Malware, Computers, Forensics, File systems, Cryptography, sector hashing, digital forensics, computer security
CITATION

K. Fairbanks, S. Garfinkel, J. Young and K. Foster, "Distinct Sector Hashes for Target File Detection," in Computer, vol. 45, no. , pp. 28-35, 2012.
doi:10.1109/MC.2012.327
87 ms
(Ver 3.3 (11022016))