Endre søk
RefereraExporteraLink to record
Permanent link

Direct link
Referera
Referensformat
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Annet format
Fler format
Språk
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Annet språk
Fler språk
Utmatningsformat
  • html
  • text
  • asciidoc
  • rtf
The Normalised Compression Distance as a File Fragment Classifier
Ansvarlig organisasjon
2010 (engelsk)Inngår i: Digital Investigation. The International Journal of Digital Forensics and Incident Response, ISSN 1742-2876, E-ISSN 1873-202X, Vol. 7, nr Suppl 1, s. S24-S31Artikkel i tidsskrift (Fagfellevurdert) Published
Abstract [en]

We have applied the generalised and universal distance measure NCD—Normalised Compression Distance—to the problem of determining the type of file fragments. To enable later comparison of the results, the algorithm was applied to fragments of a publicly available corpus of files. The NCD algorithm in conjunction with the k-nearest-neighbour (k ranging from one to ten) as the classification algorithm was applied to a random selection of circa 3000 512-byte file fragments from 28 different file types. This procedure was then repeated ten times. While the overall accuracy of the n-valued classification only improved the prior probability from approximately 3.5% to circa 32%–36%, the classifier reached accuracies of circa 70% for the most successful file types. A prototype of a file fragment classifier was then developed and evaluated on new set of data (from the same corpus). Some circa 3000 fragments were selected at random and the experiment repeated five times. This prototype classifier remained successful at classifying individual file types with accuracies ranging from only slightly lower than 70% for the best class, down to similar accuracies as in the prior experiment.

sted, utgiver, år, opplag, sider
Elsevier , 2010. Vol. 7, nr Suppl 1, s. S24-S31
HSV kategori
Identifikatorer
URN: urn:nbn:se:bth-7671DOI: 10.1016/j.diin.2010.05.004ISI: 000281010700004Lokal ID: oai:bth.se:forskinfoB3816A81E8404C23C1257806003EA7EFOAI: oai:DiVA.org:bth-7671DiVA, id: diva2:835315
Tilgjengelig fra: 2012-09-18 Laget: 2010-12-27 Sist oppdatert: 2025-09-30bibliografisk kontrollert

Open Access i DiVA

fulltekst(136 kB)557 nedlastinger
Filinformasjon
Fil FULLTEXT01.pdfFilstørrelse 136 kBChecksum SHA-512
da927c199c9d023eac60db8ec33ce453ff85b42b4ad65b33da1efeafbff41234d1ada49bee0fa18693930b31afca3762b4da3744894a567c275428076430d93f
Type fulltextMimetype application/pdf

Andre lenker

Forlagets fulltekst

Person

Axelsson, Stefan

Søk i DiVA

Av forfatter/redaktør
Axelsson, Stefan
I samme tidsskrift
Digital Investigation. The International Journal of Digital Forensics and Incident Response

Søk utenfor DiVA

GoogleGoogle Scholar
Totalt: 557 nedlastinger
Antall nedlastinger er summen av alle nedlastinger av alle fulltekster. Det kan for eksempel være tidligere versjoner som er ikke lenger tilgjengelige

doi
urn-nbn

Altmetric

doi
urn-nbn
Totalt: 564 treff
RefereraExporteraLink to record
Permanent link

Direct link
Referera
Referensformat
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Annet format
Fler format
Språk
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Annet språk
Fler språk
Utmatningsformat
  • html
  • text
  • asciidoc
  • rtf