Database creation and statistical analysis: finding connections between two or more secondary storage devices

Thumbnail Image
Files
17Sep_Johnson_Jennifer.pdf (738.4 KB)
Authors
Johnson, Jennifer M.
Subjects
digital forensics
sector hashing
common blocks
hash databases
Advisors
Rowe, Neil C.
Date of Issue
2017-09
Date
Sep-17
Publisher
Monterey, California: Naval Postgraduate School
Language
Abstract
We used MongoDB and created a database of each disk image and each unique sector found in the Real Data Corpus--a collection of disk images held by the Digital Evaluation and Exploitation Lab. Using a partial database, we found the fraction of space that is empty (contains NULLS) per secondary-storage image and for the entire database. We found duplicate images. We also characterized some of the non-probative sectors found in our database. Future students may benchmark other databases and shard the database.
Type
Thesis
Description
URI
https://hdl.handle.net/10945/56140
Series/Report No
Department
Computer Science (CS)
Organization
Identifiers
NPS Report Number
Sponsors
Funder
Format
Citation
Distribution Statement
Approved for public release; distribution is unlimited.
Rights
This publication is a work of the U.S. Government as defined in Title 17, United States Code, Section 101. Copyright protection is not available for this work in the United States.
Collections
Theses