Abstract
As all the society becomes computerized, there increases computerized data, and for digital forensic investigations, there is a great deal of unfixed-form data collected, whose exact forms are difficult to figure out, such as physical memory or page files. The most efficient method for investigating unfixed-form data is to extract strings. In case of document files, strings extracted from unfixed-form data come to include contents of the relevant documents, and in case of physical memory or page files, they can even include passwords that users have entered in addition to traces of users' using a messenger or a web page. Although extracting strings plays an important role in investigating unfixed-form data like this, the present method of extracting string includes a number of meaningless strings, while being carried out without considering the Unicode environment properly. Accordingly, this thesis intends to suggest a way of excluding meaningless strings effectively while considering the Unicode environment during the process of extracting strings.
Original language | English |
---|---|
Title of host publication | Future Information Technology, Application, and Service, FutureTech 2012 |
Pages | 425-434 |
Number of pages | 10 |
Edition | VOL. 1 |
DOIs | |
Publication status | Published - 2012 |
Event | 7th FTRA International Conference on Future Information Technology, FutureTech 2012 - Vancouver, BC, Canada Duration: 2012 Jun 26 → 2012 Jun 28 |
Publication series
Name | Lecture Notes in Electrical Engineering |
---|---|
Number | VOL. 1 |
Volume | 164 LNEE |
ISSN (Print) | 1876-1100 |
ISSN (Electronic) | 1876-1119 |
Other
Other | 7th FTRA International Conference on Future Information Technology, FutureTech 2012 |
---|---|
Country/Territory | Canada |
City | Vancouver, BC |
Period | 12/6/26 → 12/6/28 |
Bibliographical note
Funding Information:This research was supported by Bio R&D program through the National Research Foundation of Korea funded by the Ministry of Education, Science and Technology (2011-0027732).
Keywords
- Pagefile
- String
- Unallocated space
ASJC Scopus subject areas
- Industrial and Manufacturing Engineering