Research Output

Reducing the Impact of Network Bottlenecks on Remote Contraband Detection

  Cloud based storage is increasing in popularity, with
large volumes of data being stored remotely. Digital forensics
investigators examining such systems remotely are limited by
bandwidth constraints when accessing this kind of data using
traditional tools. This paper explores the potential for sub-file
hashing strategies to decrease the time taken to detect contraband
on networked storage devices, while maintaining a high degree
of accuracy. Results show that sub-file hashing is faster than full
file hashing for both LAN and Internet server configurations,
with reduced bandwidth heavily favouring sub-file strategies.

  • Date:

    06 December 2018

  • Publication Status:

    Published

  • Publisher

    Institute of Electrical and Electronics Engineers

  • DOI:

    10.1109/CyberSecPODS.2018.8560671

  • Library of Congress:

    QA75 Electronic computers. Computer science

  • Dewey Decimal Classification:

    005.8 Data security

  • Funders:

    Edinburgh Napier Funded

Citation

McKeown, S., Russell, G., & Leimich, P. (2018). Reducing the Impact of Network Bottlenecks on Remote Contraband Detection. In 2018 International Conference on Cyber Security and Protection of Digital Services (Cyber Security)doi:10.1109/CyberSecPODS.2018.8560671

Authors

Keywords

networked storage, cloud storage forensics, file server, sub-file signatures, partial-file analysis, hashing strategies, digital forensics, cryptographic hashing, logical acquisition

Monthly Views: