Publication:
Database creation and statistical analysis: finding connections between two or more secondary storage devices

Loading...
Thumbnail Image
Authors
Johnson, Jennifer M.
Subjects
digital forensics
sector hashing
common blocks
hash databases
Advisors
Rowe, Neil C.
Date of Issue
2017-09
Date
Sep-17
Publisher
Monterey, California: Naval Postgraduate School
Language
Abstract
We used MongoDB and created a database of each disk image and each unique sector found in the Real Data Corpus--a collection of disk images held by the Digital Evaluation and Exploitation Lab. Using a partial database, we found the fraction of space that is empty (contains NULLS) per secondary-storage image and for the entire database. We found duplicate images. We also characterized some of the non-probative sectors found in our database. Future students may benchmark other databases and shard the database.
Type
Thesis
Description
Series/Report No
Department
Computer Science (CS)
Organization
Identifiers
NPS Report Number
Sponsors
Funder
Format
Citation
Distribution Statement
Approved for public release; distribution is unlimited.
Rights
This publication is a work of the U.S. Government as defined in Title 17, United States Code, Section 101. Copyright protection is not available for this work in the United States.
Collections