Reducing the Time Required for Hashing Operations

Détails

ID Serval
serval:BIB_FDE3A72B6797
Type
Actes de conférence (partie): contribution originale à la littérature scientifique, publiée à l'occasion de conférences scientifiques, dans un ouvrage de compte-rendu (proceedings), ou dans l'édition spéciale d'un journal reconnu (conference proceedings).
Collection
Publications
Titre
Reducing the Time Required for Hashing Operations
Titre de la conférence
Advances in Digital Forensics IX
Auteur⸱e⸱s
Breitinger Frank, Petrov Kaloyan
Editeur
Springer Berlin Heidelberg
ISBN
978-3-642-41147-2
Statut éditorial
Publié
Date de publication
2013
Editeur⸱rice scientifique
Peterson Gilbert, Shenoi Sujeet
Volume
410
Pages
101-117
Langue
anglais
Résumé
Due to the increasingly massive amounts of data that need to be analyzed in digital forensic investigations, it is necessary to automatically recognize suspect files and filter out non-relevant files. To achieve this goal, digital forensic practitioners employ hashing algorithms to classify files into known-good, known-bad and unknown files. However, a typical personal computer may store hundreds of thousands of files and the task becomes extremely time-consuming. This paper attempts to address the problem using a framework that speeds up processing by using multiple threads. Unlike a typical multithreading approach, where the hashing algorithm is performed by multiple threads, the proposed framework incorporates a dedicated prefetcher thread that reads files from a device. Experimental results demonstrate a runtime efficiency of nearly 40% over single threading.
Mots-clé
File hashing, runtime performance, file handling, prefetching
Création de la notice
06/05/2021 11:01
Dernière modification de la notice
06/05/2021 11:30
Données d'usage