A Comparative Study of Support Vector Machine and Neural Networks for File Type Identification Using n-gram Analysis

作者: Nhien-An Le-Khac , Darren R. Hayes , Mark Scanlon , Joachim Sester

DOI: 10.1016/J.FSIDI.2021.301121

关键词:

摘要: … types, the size we used in this paper is just for the relevant file types in our experiments. We then convert the byte frequency distribution of different file types to n-grams with n = 1 and 2. …

参考文章(58)
Rainer Poisel, Marlies Rybnicek, Simon Tjoa, Taxonomy of Data Fragment Classification Techniques Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering. pp. 67- 85 ,(2014) , 10.1007/978-3-319-14289-0_6
Luigi Sportiello, Stefano Zanero, Context-Based File Block Classification international conference on digital forensics. pp. 67- 82 ,(2012) , 10.1007/978-3-642-33962-2_5
Marcelo Ruback, Bruno Hoelz, Celia Ralha, A NEW APPROACH FOR CREATING FORENSIC HASHSETS international conference on digital forensics. pp. 83- 97 ,(2012) , 10.1007/978-3-642-33962-2_6
Ryan C. Mayer, Filetype identification using long, summarized n-grams Monterey, California. Naval Postgraduate School. ,(2011)
Piotr Indyk, Aristides Gionis, Rajeev Motwani, Similarity Search in High Dimensions via Hashing very large data bases. pp. 518- 529 ,(1999)
Vassil Roussev, Data Fingerprinting with Similarity Digests international conference on digital forensics. pp. 207- 226 ,(2010) , 10.1007/978-3-642-15506-2_15
Ahmed Kattan, Edgar Galván-López, Riccardo Poli, Michael O’Neill, GP-Fileprints: file types detection using genetic programming european conference on genetic programming. pp. 134- 145 ,(2010) , 10.1007/978-3-642-12148-7_12
Martin Karresand, Nahid Shahmehri, Oscar — File Type Identification of Binary Data in Disk Clusters and RAM Pages information security. pp. 413- 424 ,(2006) , 10.1007/0-387-33406-8_35
Mehdi Chehel Amirani, Mohsen Toorani, Sara Mihandoost, Feature-based Type Identification of File Fragments Security and Communication Networks. ,vol. 6, pp. 115- 128 ,(2013) , 10.1002/SEC.553