Fuzzy Hashing - Jesse Kornblum

More documents

Recommendations

Info

Future Research Need hashes of known files Hash sets like NSRL or Hashkeeper How much information to record? File size, content? File Footer Reconstruction Record headers when making signatures Append recovered footersManTech CFIA34
Future Research File footer ReconstructionKnown kitty pornFile header withfooter appendedManTech CFIA35
Page 1: ManTech SMAComputer Forensics and I
Page 4 and 5: The Joy of Hashing Hashing reduces
Page 7 and 8: Disclaimer I didn’t invent this m
Page 9 and 10: MD5 Explained If you change one bit
Page 11 and 12: Rolling Hash It would be nice to se
Page 13: Rolling HashTo update state (c,x,y,
Page 20 and 21: Rolling HashDeep into the darkness
Page 23 and 24: Demonstration Word DocumentsManTech
Page 25: DemonstrationWARNING:EXPLICIT IMAGE
Page 29 and 30: Demonstration File headerKnown kitt
Page 31 and 32: Demonstration Source code reuseManT
Page 33: IssuesMatching via Fuzzy Hashing is
Page 37 and 38: Conclusion Fuzzy Hashing allows exa

Fuzzy Hashing - Jesse Kornblum

Create successful ePaper yourself

Delete template?

Save as template?