Similarity Digest Search: A Survey and Comparative Analysis of Strategies to Perform Known File Filtering Using Approximate Matching

Joint Authors

Moia, Vitor Hugo Galhardo
Henriques, Marco Aurélio Amaral

Source

Security and Communication Networks

Issue

Vol. 2017, Issue 2017 (31 Dec. 2017), pp.1-17, 17 p.

Publisher

Hindawi Publishing Corporation

Publication Date

2017-09-26

Country of Publication

Egypt

No. of Pages

17

Main Subjects

Information Technology and Computer Science

Abstract EN

Digital forensics is a branch of Computer Science aiming at investigating and analyzing electronic devices in the search for crime evidence.

There are several ways to perform this search.

Known File Filter (KFF) is one of them, where a list of interest objects is used to reduce/separate data for analysis.

Holding a database of hashes of such objects, the examiner performs lookups for matches against the target device.

However, due to limitations over hash functions (inability to detect similar objects), new methods have been designed, called approximate matching.

This sort of function has interesting characteristics for KFF investigations but suffers mainly from high costs when dealing with huge data sets, as the search is usually done by brute force.

To mitigate this problem, strategies have been developed to better perform lookups.

In this paper, we present the state of the art of similarity digest search strategies, along with a detailed comparison involving several aspects, as time complexity, memory requirement, and search precision.

Our results show that none of the approaches address at least these main aspects.

Finally, we discuss future directions and present requirements for a new strategy aiming to fulfill current limitations.

American Psychological Association (APA)

Moia, Vitor Hugo Galhardo& Henriques, Marco Aurélio Amaral. 2017. Similarity Digest Search: A Survey and Comparative Analysis of Strategies to Perform Known File Filtering Using Approximate Matching. Security and Communication Networks،Vol. 2017, no. 2017, pp.1-17.
https://search.emarefa.net/detail/BIM-1202736

Modern Language Association (MLA)

Moia, Vitor Hugo Galhardo& Henriques, Marco Aurélio Amaral. Similarity Digest Search: A Survey and Comparative Analysis of Strategies to Perform Known File Filtering Using Approximate Matching. Security and Communication Networks No. 2017 (2017), pp.1-17.
https://search.emarefa.net/detail/BIM-1202736

American Medical Association (AMA)

Moia, Vitor Hugo Galhardo& Henriques, Marco Aurélio Amaral. Similarity Digest Search: A Survey and Comparative Analysis of Strategies to Perform Known File Filtering Using Approximate Matching. Security and Communication Networks. 2017. Vol. 2017, no. 2017, pp.1-17.
https://search.emarefa.net/detail/BIM-1202736

Data Type

Journal Articles

Language

English

Notes

Includes bibliographical references

Record ID

BIM-1202736