Pre-Emptive File Signature Creation for Digital Forensics

Date Added: Jun 2010
Format: PDF

An emerging trend in the way users access their data is threatening to undermine the processes and techniques currently employed by digital forensics investigations. The storage of data in distant, distributed large-scale storage platforms prevents the detection of illicit files on a suspect's hard drive, as this is no longer the storage location of choice. With the ever growing datasets encountered in distributed environments and concurrent use of the underlying hardware by multiple users it is no longer feasible to carry out post-hoc signature creation as it would be disruptive and time consuming.