LwVLC : Light-weight Variable-length Chunking Scheme for File Similarity Search in Digital Forensics
Min Ja Kim, Chuck Yoo, Wan Yeon Lee, Young Woong Ko · Advanced science and technology letters · 2013
Forensic examination of computer file system is an important component of cyber-security. As the capacity of storage devices are continuously growing, it leads to difficulties and time-consuming task to examine lots of files. Therefore, if we find an effective way to search file similarity, large amounts of files can be analyzed within the time constraints of an investigation and the overall performance of file forensics can be improved. In this paper, we examine a novel scheme for approximate file similarity search based on VLC hash scheme which is light-weight variable-length chunking scheme for file similarity search in digital forensics (LwVLC). The key idea is to minimize metadata size of file similarity information and reduce the execution time of similarity search with high accuracy.