File Type Identification of File Fragments using Longest Common Subsequence (LCS)

International Conference on Computing and Applied Informatics 2016

物理学;计算机科学

Rahmat, R.F.^1 ; Nicholas, F.^1 ; Purnamawati, S.^1 ; Sitompul, O.S.^1

Department of Information Technology, Faculty of Computer Science and Information Technology, University of Sumatera Utara, Medan, Indonesia^1

关键词: Data type;    Digital evidence;    File fragments;    File types;    Longest common subsequences;   

Others  :  https://iopscience.iop.org/article/10.1088/1742-6596/801/1/012054/pdf
DOI  :  10.1088/1742-6596/801/1/012054

学科分类：计算机科学（综合）

来源: IOP

【 摘 要 】

Computer forensic analyst is a person in charge of investigation and evidence tracking. In certain cases, the file needed to be presented as digital evidence was deleted. It is difficult to reconstruct the file, because it often lost its header and cannot be identified while being restored. Therefore, a method is required for identifying the file type of file fragments. In this research, we propose Longest Common Subsequences that consists of three steps, namely training, testing and validation, to identify the file type from file fragments. From all testing results we can conlude that our proposed method works well and achieves 92.91% of accuracy to identify the file type of file fragment for three data types.