We describe a solution for fast indexing and searching within large heterogeneous data sets whose main purpose is to support investigators that need to analyze forensic disk images originated by seizures or created from bodies of evidence. Our approach is based on a combination of techniques aimed at improving efficiency and reliability of the indexing process.We do not rely on existing frameworks like Hadoop but borrow concepts from different contexts including High Performance Computing and Database management.
Forensic disk image indexing and search in an HPC environment / Bernaschi, Massimo; M., Cianfriglia; A., Di Marco; A., Sabellico; G., Me; Carbone, Giancarlo; Totaro, Giuseppe. - ELETTRONICO. - (2014), pp. 558-565. (Intervento presentato al convegno High Performance Computing & Simulation (HPCS), 2014 International Conference on tenutosi a Bologna nel 21-25 Luglio 2014) [10.1109/HPCSim.2014.6903735].
Forensic disk image indexing and search in an HPC environment
BERNASCHI, Massimo;CARBONE, Giancarlo;TOTARO, GIUSEPPE
2014
Abstract
We describe a solution for fast indexing and searching within large heterogeneous data sets whose main purpose is to support investigators that need to analyze forensic disk images originated by seizures or created from bodies of evidence. Our approach is based on a combination of techniques aimed at improving efficiency and reliability of the indexing process.We do not rely on existing frameworks like Hadoop but borrow concepts from different contexts including High Performance Computing and Database management.I documenti in IRIS sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione.
