Similarity preserving hashing: Eligible properties and a new algorithm MRSH-V2

Lecture Notes of the Institute for Computer Sciences, Social-Informatics and Telecommunications Engineering, LNICST

Volumn 114 LNICST, Issue , 2013, Pages 167-182

  Breitinger, Frank ^a   Baier, Harald ^a  

^a DARMSTADT UNIVERSITY OF APPLIED SCIENCES   (Germany)

Author keywords

Digital forensics; Fuzzy hashing; MRSH v2; Properties of similarity preserving hashing; Similarity preserving hashing

Indexed keywords

COMPUTER CRIME; CRIME; DIGITAL FORENSICS; ELECTRONIC CRIME COUNTERMEASURES; HASH FUNCTIONS;

AVALANCHE EFFECTS; CRYPTOGRAPHIC HASH FUNCTIONS; FRAGMENT DETECTION; FUZZY HASHING; MRSH-V2; RUN-TIME PERFORMANCE; SIMILARITY PRESERVING;

COMPUTER FORENSICS;

EID: 84982802386     PISSN: 18678211     EISSN: None     Source Type: Book Series    
DOI: 10.1007/978-3-642-39891-9_11     Document Type: Conference Paper

References (18)

1. NIST, “National Software Reference Library” (May 2012),http://www.nsrl.nist.gov
2. Kornblum, J.: Identifying almost identical files using context triggered piecewise hashing. In: Digital Forensic Research Workshop (DFRWS), vol. 3S, pp. 91–97 (2006)
3. Roussev, V.: Data fingerprinting with similarity digests. In: Chow, K.-P., Shenoi, S. (eds.) Advances in Digital Forensics VI. IFIP AICT, vol. 337, pp. 207–226. Springer, Heidelberg (2010)
4. Breitinger, F., Baier, H.: A Fuzzy Hashing Approach based on Random Sequences and Hamming Distance. In: ADFSL Conference on Digital Forensics, Security and Law, pp. 89–101 (May 2012)
5. Roussev, V., Richard, G.G., Marziale, L.: Multi-resolution similarity hashing. In: Digital Forensic Research Workshop (DFRWS), pp. 105–113 (2007)
6. Roussev, V.: Scalable data correlation. International Conference on Digital Forensics (IFIP WG 11.9) (January 2012)
7. Tridgell, A.: Spamsum. Readme (2002), http://samba.org/ftp/unpacked/junkcode/spamsum/README
8. Chen, L., Wang, G.: An Efficient Piecewise Hashing Method for Computer Forensics. In: Workshop on Knowledge Discovery and Data Mining, pp. 635–638 (2008)
9. Seo, K., Lim, K., Choi, J., Chang, K., Lee, S.: Detecting Similar Files Based on Hash and Statistical Analysis for Digital Forensic Investigation. In: Computer Science and its Applications (CSA 2009), pp. 1–6 (December 2009)
10. Breitinger, F., Baier, H.: Performance Issues About Context-Triggered Piecewise Hashing. In: Gladyshev, P., Rogers, M.K. (eds.) ICDF2C 2011. LNICST, vol. 88, pp. 141–155. Springer, Heidelberg (2012)
11. Baier, H., Breitinger, F.: Security Aspects of Piecewise Hashing in Computer Forensics. In: IT Security Incident Management & IT Forensics (IMF), 21–36 (May 2011)
12. Breitinger, F.: Security Aspects of Fuzzy Hashing. Master’s thesis, Hochschule Darmstadt (February 2011), https://www.dasec.h-da.de/offerings/theses/
13. Roussev, V.: Building a Better Similarity Trap with Statistically Improbable Features. In: 42nd Hawaii International Conference on System Sciences, pp. 1–10 (2009)
14. SHS, “Secure Hash Standard” (1995)
15. Bloom, B.H.: Space/time trade-offs in hash coding with allowable errors. Communications of the ACM 13, 422–426 (1970)
16. Roussev, V.: An evaluation of forensic similarity hashes. In: Digital Forensic Research Workshop, vol. 8, pp. 34–41 (2011)
17. Breitinger, F., Baier, H., Beckingham, J.: Security and Implementation Analysis of the Similarity Digest sdhash. In: First International Baltic Conference on Network Security & Forensics (NeSeFo) (August 2012)
18. Noll, L.C.: Fowler/Noll/Vo (FNV) Hash (2001), http://www.isthe.com/chongo/tech/comp/fnv/index.html