Accession Number : AD1046839


Title :   Testing the Forensic Interestingness of Image Files Based on Size and Type


Descriptive Note : Technical Report


Corporate Author : Naval Postgraduate School Monterey United States


Personal Author(s) : Goldberg,Raymond M


Full Text : https://apps.dtic.mil/dtic/tr/fulltext/u2/1046839.pdf


Report Date : 01 Sep 2017


Pagination or Media Count : 45


Abstract : In this thesis, we investigate the relationship between the size and type of a file and its forensic usefulness. We investigate GIF, MP3, MP4, PNG, and JPEG files found in a large collection called the Real Drive Corpus, and the files classification as software-based, entertainment-based, or personal. Results of these experiments were compared to prior work to find interesting files. Results show that the previous experiments were effective at marking interesting files as interesting, but there were still a lot of uninteresting files that were marked as interesting. Also, the results do not show a correlation between the interestingness of a file, its type, and its size.


Descriptors :   scanning , FILES (RECORDS) , computer programs , operating systems , DATA STORAGE SYSTEMS , information retrieval , FORENSIC ANALYSIS


Subject Categories : Information Science
      Computer Programming and Software


Distribution Statement : APPROVED FOR PUBLIC RELEASE