Accession Number:



Testing the Forensic Interestingness of Image Files Based on Size and Type

Personal Author(s):

Corporate Author:

Naval Postgraduate School Monterey United States

Report Date:



In this thesis, we investigate the relationship between the size and type of a file and its forensic usefulness. We investigate GIF, MP3, MP4, PNG, and JPEG files found in a large collection called the Real Drive Corpus, and the files classification as software-based, entertainment-based, or personal. Results of these experiments were compared to prior work to find interesting files. Results show that the previous experiments were effective at marking interesting files as interesting, but there were still a lot of uninteresting files that were marked as interesting. Also, the results do not show a correlation between the interestingness of a file, its type, and its size.

Descriptive Note:

Technical Report



Communities Of Interest:

Distribution Statement:

Approved For Public Release;

File Size: