Accomplishments

Weight-Based-Approach for Searching File Using File Attributes in Forensic


  • Details
  • Share
Category
Articles
Publisher
Ijera
Publishing Date
01-Oct-2015
volume
vol 3
Issue
Issue 5
Pages
1-10
  • Abstract

The main goal of digital forensics is the extraction of suspected files from the target devices that can be defined as digitalevidence. The digital world is developing at a very fast pace. The size of hard disks made available to the users is also increasing rapidly. The volume of data or the number of files that can be stored is also increasing. To find a particular file the investigators relyon filters and traces. The traceability process has become a key or an important element of the digital investigation process, as it iscapable to map the events of an incident from difference sources in obtaining evidence of an incident to be used for other auxiliaryinvestigation aspects. Filter are used by the investigator to remove unwanted data and get the required files. But the traceability andfilter have not been explored to its limits. Because of these, little manipulation in the data on the digital device makes the use ofspecific trace or filter useless. These work like a loophole, which can be used by criminals to divert the investigation away fromevidence. The loophole can be made less harmful by creating a priority based investigation using traces and filters. Priority is given tofiles which may be or may not be evidence, by assigning them the weight on the basis of the results of traces and filters. By assigningthe weight, all files will be taken into consideration and files can be arranged based on the weight. So with weight-based-priority in use, the little or more manipulation to data will be taken into consideration.

Apply Now Enquire Now