상세정보
학술대회
High-speed Search using Tarari Content Processor in Digital Forensics
- 발행일
- 200808
- 출처
- Digital Forensic Research Workshop (DFRWS) 2008, pp.S91-S95
- 출판사
- Elsevier
- 협약과제
- 08MS2600, 정보투명성 보장형 디지털 포렌식 시스템 개발, 홍도원
- 초록
- Recently, "Speed" is one of the hot issues in digital forensics. Thanks to a recent advanced technology, today we can get bigger hard drive disks at a lower price than previously. But unfortunately, it means for forensic investigators that they need tremendous time and effort in the sequence of process of creating forensic images, searching into them and analyzing them. In order to solve this problem, some methods have been proposed to improve performance of forensic tools. One of them getting attention is a hardware-based approach. However, such a way is limited in the field of evidence cloning or password cracking while it is rarely used in searching and analysis of the digital evidence. In this paper, we design and implement a high-speed search engine using a Tarari content processor. Furthermore, we show feasibility of our approach by comparing its performance and features to those of a popular forensic tool currently on the market. © 2008 Digital Forensic Research Workshop.
- KSP 제안 키워드
- Content Processor, Digital forensics, Forensic images, Forensic research, Hardware-Based Approach, High Speed, Password cracking, Search Engine, advanced technology, digital evidence, forensic tool