Using normalized compression distance for classifying file fragments

ARES 2010 - 5th International Conference on Availability, Reliability, and Security

Volumn , Issue , 2010, Pages 641-646

  Axelsson, Stefan ^a  

^a BLEKINGE INSTITUTE OF TECHNOLOGY   (Sweden)

Author keywords

APP IDEN; FOR DMIN

Indexed keywords

CLASSIFICATION ALGORITHM; DISTANCE MEASURE; FILE FRAGMENTS; FILE TYPES; NORMALIZED COMPRESSION DISTANCE; PRIOR PROBABILITY; RANDOM SELECTION;

EID: 77952377647     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ARES.2010.100     Document Type: Conference Paper

References (10)

1. Rudi Cilibrasi, Statistical Inference Through Data Compression, Ph.D. thesis, Institute for Logic, Language and Computation Universiteit van Amsterdam, Plantage Muidergracht 24, 1018 TV Amsterdam, 2007, http://www.illc.uva.nl/.
2. Paolo Ferragina, Raffaele Giancarlo, Valentina Greco, Giovanni Manzini, and Gabriel Valiente, "Compression-based classification of biological sequences and structures via the universal similarity metric: experimental assessment," BMC Bioinformatics, vol. 8, no. 1, pp. 252, 2007.
3. Eamonn Keogh, Stefano Lonardi, and Chotirat Ann Ratanamahatana, "Towards parameter-free data mining," in KDD '04: Proceedings of the tenth ACM SIGKDD international conference on Knowledge discovery and data mining, New York, NY, USA, 2004, pp. 206-215, ACM.
4. M. Cebrian, M. Alfonseca, and A. Ortega, "The normalized compression distance is resistant to noise," Information Theory, IEEE Transactions on, vol. 53, no. 5, pp. 1895-1900, May 2007.
5. P.M.B. Vitanyi, F.J. Balbach, R.L. Cilibrasi, and M. Li, Information Theory and Statistical Learning, chapter Chapter 3, Springer-Verlag, 2008.
6. Manuel Cebrian, Manuel Alfonseca, and Alfonso Ortega, "Common pitfalls using normalized compression distance: What to watch out for in a compressor," Communications in Information and Systems (CIS), vol. 5, no. 4, pp. 367-400, 2005.
7. M. Karresand and N. Shahmehri, "Oscar - file type identification of binary data in disk clusters and ram pages," Security and Privacy in Dynamic Environments, vol. 201/2006, pp. 413-424, July 2006, ISBN 978-0-387-33405-9.
8. M. Karresand and N. Shahmehri, "File type identification of data fragments by their binary structure," in IEEE Information Assurance Workshop, West Point, NY, USA, 21-23 June 2006, IEEE, pp. 140-147, ISBN: 1-4244-0130-5. (Pubitemid 46028750)
9. Cor J. Veenman, "Statistical disk cluster classification for file carving," in IAS '07: Proceedings of the Third International Symposium on Information Assurance and Security, Washington, DC, USA, 2007, pp. 393-398, IEEE Computer Society.
10. William C. Calhoun and Drue Coles, "Predicting the types of file fragments," in Digital Investigation, The Proceedings of the Eighth Annual DFRWS Conference, Philadelphia, PA, USA, Aug. 2008, vol. 5:1, pp. S14-S20, doi:10.1016/j.diin.2008.05.005.