Reducing the Time Required for Hashing Operations

Details

Serval ID
serval:BIB_FDE3A72B6797
Type
Inproceedings: an article in a conference proceedings.
Collection
Publications
Title
Reducing the Time Required for Hashing Operations
Title of the conference
Advances in Digital Forensics IX
Author(s)
Breitinger Frank, Petrov Kaloyan
Publisher
Springer Berlin Heidelberg
ISBN
978-3-642-41147-2
Publication state
Published
Issued date
2013
Editor
Peterson Gilbert, Shenoi Sujeet
Volume
410
Pages
101-117
Language
english
Abstract
Due to the increasingly massive amounts of data that need to be analyzed in digital forensic investigations, it is necessary to automatically recognize suspect files and filter out non-relevant files. To achieve this goal, digital forensic practitioners employ hashing algorithms to classify files into known-good, known-bad and unknown files. However, a typical personal computer may store hundreds of thousands of files and the task becomes extremely time-consuming. This paper attempts to address the problem using a framework that speeds up processing by using multiple threads. Unlike a typical multithreading approach, where the hashing algorithm is performed by multiple threads, the proposed framework incorporates a dedicated prefetcher thread that reads files from a device. Experimental results demonstrate a runtime efficiency of nearly 40% over single threading.
Keywords
File hashing, runtime performance, file handling, prefetching
Create date
06/05/2021 11:01
Last modification date
06/05/2021 11:30
Usage data