Accession Number : AD1046839

Title :   Testing the Forensic Interestingness of Image Files Based on Size and Type

Descriptive Note : Technical Report

Corporate Author : Naval Postgraduate School Monterey United States

Personal Author(s) : Goldberg,Raymond M

Full Text :

Report Date : 01 Sep 2017

Pagination or Media Count : 45

Abstract : In this thesis, we investigate the relationship between the size and type of a file and its forensic usefulness. We investigate GIF, MP3, MP4, PNG, and JPEG files found in a large collection called the Real Drive Corpus, and the files classification as software-based, entertainment-based, or personal. Results of these experiments were compared to prior work to find interesting files. Results show that the previous experiments were effective at marking interesting files as interesting, but there were still a lot of uninteresting files that were marked as interesting. Also, the results do not show a correlation between the interestingness of a file, its type, and its size.

Descriptors :   scanning , FILES (RECORDS) , computer programs , operating systems , DATA STORAGE SYSTEMS , information retrieval , FORENSIC ANALYSIS

Subject Categories : Information Science
      Computer Programming and Software

Distribution Statement : APPROVED FOR PUBLIC RELEASE