This paper provides evidence of a distinguished feature of file systems, that we call File System Genome. Such a feature is originated by the locations where the file blocks are placed on the mass-storage device by the operating system during the installation procedure. It appears from our study that the File System Genome is a distinctive feature of each operating system installation. In particular, our extensive set of experiments shows that the installation of the same operating system on two identical hardware configurations generates two different File System Genomes. Further, the application of sound information theory tools, such as min entropy, show that the differences between two File System Genome are considerably relevant. The results provided in this paper constitute the scientific basis for a number of applications in various fields of information technology, such as devices' identification and security.

Uniqueness of the file systems genome: Supporting arguments and massive experimental measurements / Roberto Di, Pietro; Mancini, Luigi Vincenzo; Villani, Antonio; Vitali, Domenico. - STAMPA. - (2013), pp. 1-8. (Intervento presentato al convegno 8th IEEE International Conference on Risks and Security of Internet and Systems tenutosi a La Rochelle, France nel October 23-25, 2013) [10.1109/crisis.2013.6766355].

Uniqueness of the file systems genome: Supporting arguments and massive experimental measurements

MANCINI, Luigi Vincenzo;VILLANI, Antonio;VITALI, Domenico
2013

Abstract

This paper provides evidence of a distinguished feature of file systems, that we call File System Genome. Such a feature is originated by the locations where the file blocks are placed on the mass-storage device by the operating system during the installation procedure. It appears from our study that the File System Genome is a distinctive feature of each operating system installation. In particular, our extensive set of experiments shows that the installation of the same operating system on two identical hardware configurations generates two different File System Genomes. Further, the application of sound information theory tools, such as min entropy, show that the differences between two File System Genome are considerably relevant. The results provided in this paper constitute the scientific basis for a number of applications in various fields of information technology, such as devices' identification and security.
2013
8th IEEE International Conference on Risks and Security of Internet and Systems
computer forensics; device identification; security and privacy
04 Pubblicazione in atti di convegno::04b Atto di convegno in volume
Uniqueness of the file systems genome: Supporting arguments and massive experimental measurements / Roberto Di, Pietro; Mancini, Luigi Vincenzo; Villani, Antonio; Vitali, Domenico. - STAMPA. - (2013), pp. 1-8. (Intervento presentato al convegno 8th IEEE International Conference on Risks and Security of Internet and Systems tenutosi a La Rochelle, France nel October 23-25, 2013) [10.1109/crisis.2013.6766355].
File allegati a questo prodotto
Non ci sono file associati a questo prodotto.

I documenti in IRIS sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione.

Utilizza questo identificativo per citare o creare un link a questo documento: https://hdl.handle.net/11573/762799
 Attenzione

Attenzione! I dati visualizzati non sono stati sottoposti a validazione da parte dell'ateneo

Citazioni
  • ???jsp.display-item.citation.pmc??? ND
  • Scopus 0
  • ???jsp.display-item.citation.isi??? 0
social impact