{"id":"https://openalex.org/W2151686889","doi":"https://doi.org/10.1080/15567280802050436","title":"An Empirical Analysis of Disk Sector Hashes for Data Carving","display_name":"An Empirical Analysis of Disk Sector Hashes for Data Carving","publication_year":2008,"publication_date":"2008-05-27","ids":{"openalex":"https://openalex.org/W2151686889","doi":"https://doi.org/10.1080/15567280802050436","mag":"2151686889"},"language":"en","primary_location":{"id":"doi:10.1080/15567280802050436","is_oa":false,"landing_page_url":"https://doi.org/10.1080/15567280802050436","pdf_url":null,"source":{"id":"https://openalex.org/S127916260","display_name":"Journal of Digital Forensic Practice","issn_l":"1556-7281","issn":["1556-7281","1556-7346"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320547","host_organization_name":"Taylor & Francis","host_organization_lineage":["https://openalex.org/P4310320547","https://openalex.org/P4310320449"],"host_organization_lineage_names":["Taylor & Francis","Informa"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Digital Forensic Practice","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5077577982","display_name":"Yoginder S. Dandass","orcid":null},"institutions":[{"id":"https://openalex.org/I99041443","display_name":"Mississippi State University","ror":"https://ror.org/0432jq872","country_code":"US","type":"education","lineage":["https://openalex.org/I4210141039","https://openalex.org/I99041443"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Yoginder Singh Dandass","raw_affiliation_strings":["Mississippi State University, Computer Science and Engineering, Box 9637, Mississippi State, Mississippi, 39762, USA","Mississippi State University, Computer Science and Engineering , Box 9637, Mississippi State, Mississippi, 39762, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Mississippi State University, Computer Science and Engineering, Box 9637, Mississippi State, Mississippi, 39762, USA","institution_ids":["https://openalex.org/I99041443"]},{"raw_affiliation_string":"Mississippi State University, Computer Science and Engineering , Box 9637, Mississippi State, Mississippi, 39762, USA","institution_ids":["https://openalex.org/I99041443"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5050923002","display_name":"Nathan Joseph Necaise","orcid":null},"institutions":[{"id":"https://openalex.org/I99041443","display_name":"Mississippi State University","ror":"https://ror.org/0432jq872","country_code":"US","type":"education","lineage":["https://openalex.org/I4210141039","https://openalex.org/I99041443"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Nathan Joseph Necaise","raw_affiliation_strings":["Mississippi State University, Computer Science and Engineering, Box 9637, Mississippi State, Mississippi, 39762, USA","Mississippi State University, Computer Science and Engineering , Box 9637, Mississippi State, Mississippi, 39762, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Mississippi State University, Computer Science and Engineering, Box 9637, Mississippi State, Mississippi, 39762, USA","institution_ids":["https://openalex.org/I99041443"]},{"raw_affiliation_string":"Mississippi State University, Computer Science and Engineering , Box 9637, Mississippi State, Mississippi, 39762, USA","institution_ids":["https://openalex.org/I99041443"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5047904949","display_name":"Sherry Reede Thomas","orcid":null},"institutions":[{"id":"https://openalex.org/I99041443","display_name":"Mississippi State University","ror":"https://ror.org/0432jq872","country_code":"US","type":"education","lineage":["https://openalex.org/I4210141039","https://openalex.org/I99041443"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sherry Reede Thomas","raw_affiliation_strings":["Mississippi State University, Computer Science and Engineering, Box 9637, Mississippi State, Mississippi, 39762, USA","Mississippi State University, Computer Science and Engineering , Box 9637, Mississippi State, Mississippi, 39762, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Mississippi State University, Computer Science and Engineering, Box 9637, Mississippi State, Mississippi, 39762, USA","institution_ids":["https://openalex.org/I99041443"]},{"raw_affiliation_string":"Mississippi State University, Computer Science and Engineering , Box 9637, Mississippi State, Mississippi, 39762, USA","institution_ids":["https://openalex.org/I99041443"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5077577982"],"corresponding_institution_ids":["https://openalex.org/I99041443"],"apc_list":null,"apc_paid":null,"fwci":3.9459,"has_fulltext":false,"cited_by_count":19,"citation_normalized_percentile":{"value":0.95164916,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":"2","issue":"2","first_page":"95","last_page":"104"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T14339","display_name":"Image Processing and 3D Reconstruction","score":0.995199978351593,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9829999804496765,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8305996060371399},{"id":"https://openalex.org/keywords/hash-function","display_name":"Hash function","score":0.7848523855209351},{"id":"https://openalex.org/keywords/md5","display_name":"MD5","score":0.693011999130249},{"id":"https://openalex.org/keywords/digital-forensics","display_name":"Digital forensics","score":0.5832274556159973},{"id":"https://openalex.org/keywords/metadata","display_name":"Metadata","score":0.5491202473640442},{"id":"https://openalex.org/keywords/bloom-filter","display_name":"Bloom filter","score":0.5062279105186462},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.42968714237213135},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3725515604019165},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.2743069529533386},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.2580432593822479},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.1256827712059021}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8305996060371399},{"id":"https://openalex.org/C99138194","wikidata":"https://www.wikidata.org/wiki/Q183427","display_name":"Hash function","level":2,"score":0.7848523855209351},{"id":"https://openalex.org/C157172786","wikidata":"https://www.wikidata.org/wiki/Q185235","display_name":"MD5","level":3,"score":0.693011999130249},{"id":"https://openalex.org/C84418412","wikidata":"https://www.wikidata.org/wiki/Q3246940","display_name":"Digital forensics","level":2,"score":0.5832274556159973},{"id":"https://openalex.org/C93518851","wikidata":"https://www.wikidata.org/wiki/Q180160","display_name":"Metadata","level":2,"score":0.5491202473640442},{"id":"https://openalex.org/C147224247","wikidata":"https://www.wikidata.org/wiki/Q885373","display_name":"Bloom filter","level":2,"score":0.5062279105186462},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.42968714237213135},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3725515604019165},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.2743069529533386},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2580432593822479},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.1256827712059021}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1080/15567280802050436","is_oa":false,"landing_page_url":"https://doi.org/10.1080/15567280802050436","pdf_url":null,"source":{"id":"https://openalex.org/S127916260","display_name":"Journal of Digital Forensic Practice","issn_l":"1556-7281","issn":["1556-7281","1556-7346"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320547","host_organization_name":"Taylor & Francis","host_organization_lineage":["https://openalex.org/P4310320547","https://openalex.org/P4310320449"],"host_organization_lineage_names":["Taylor & Francis","Informa"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Digital Forensic Practice","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":10,"referenced_works":["https://openalex.org/W109683945","https://openalex.org/W1971602221","https://openalex.org/W1982290981","https://openalex.org/W1984981793","https://openalex.org/W1998518913","https://openalex.org/W2081747167","https://openalex.org/W2140223745","https://openalex.org/W2159553602","https://openalex.org/W2197070441","https://openalex.org/W3145042860"],"related_works":["https://openalex.org/W2227807207","https://openalex.org/W2370014100","https://openalex.org/W1852009617","https://openalex.org/W3137108924","https://openalex.org/W4287264924","https://openalex.org/W2042819006","https://openalex.org/W2170165007","https://openalex.org/W1979110442","https://openalex.org/W2156660460","https://openalex.org/W2362866566"],"abstract_inverted_index":{"Discovering":[0],"known":[1,69,109],"illicit":[2,34,70,110],"material":[3],"on":[4],"digital":[5,14],"storage":[6,215,227],"devices":[7],"is":[8,25,76,192],"an":[9],"important":[10],"component":[11],"of":[12,32,66,80,90,123,141,160,174,189,224,233],"a":[13,52,124,219],"forensic":[15,235],"investigation.":[16],"Using":[17],"existing":[18],"data":[19],"carving":[20],"techniques":[21],"and":[22,40,86,154,157,164,181,197,210,226],"tools,":[23],"it":[24],"typically":[26],"difficult":[27],"to":[28,58,94,167],"recover":[29],"remaining":[30],"fragments":[31],"deleted":[33],"files":[35,111,140,166],"whose":[36,62],"file":[37,41],"system":[38],"metadata":[39],"headers":[42],"have":[43],"been":[44],"overwritten":[45],"by":[46],"newer":[47],"files.":[48,71],"In":[49],"such":[50],"cases,":[51],"sector-based":[53],"scan":[54],"can":[55],"be":[56],"used":[57],"locate":[59],"those":[60,65,97],"sectors":[61,67,91,98,107,135,161,169],"content":[63],"matches":[64],"from":[68,108,137,162],"However,":[72],"brute-force":[73],"sector-by-sector":[74],"comparison":[75],"prohibitive":[77],"in":[78,92,127],"terms":[79],"time":[81],"required.":[82],"Techniques":[83],"that":[84,99,178],"compute":[85],"compare":[87],"hash-based":[88],"signatures":[89,105],"order":[93],"filter":[95],"out":[96],"do":[100],"not":[101],"produce":[102,183,204],"the":[103,116,121,129,175,187,201],"same":[104],"as":[106],"are":[112],"required":[113,229],"for":[114,131,195,230],"accelerating":[115],"process.":[117],"This":[118],"article":[119],"reports":[120],"results":[122,176],"case":[125],"study":[126],"which":[128],"hashes":[130,147,207],"over":[132,138],"528":[133],"million":[134],"extracted":[136],"433,000":[139],"different":[142],"types":[143],"were":[144,148,170],"analyzed.":[145],"The":[146,172],"computed":[149],"using":[150],"SHA1,":[151],"MD5,":[152,211],"CRC64,":[153],"CRC32":[155,196],"algorithms":[156,203],"hash":[158],"collisions":[159,225],"JPEG":[163],"WAV":[165],"other":[168],"recorded.":[171],"analysis":[173],"shows":[177],"although":[179],"MD5":[180],"SHA1":[182,209],"no":[184],"false-positive":[185],"indications,":[186],"occurrence":[188],"false":[190],"positives":[191],"relatively":[193],"low":[194],"especially":[198],"CRC64.":[199],"Furthermore,":[200],"CRC-based":[202],"considerably":[205],"smaller":[206,214],"than":[208],"thereby":[212],"requiring":[213],"capacities.":[216],"CRC64":[217],"provides":[218],"good":[220],"compromise":[221],"between":[222],"number":[223],"capacity":[228],"practical":[231],"implementations":[232],"sector-scanning":[234],"tools.":[236]},"counts_by_year":[{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":2},{"year":2021,"cited_by_count":2},{"year":2019,"cited_by_count":3},{"year":2018,"cited_by_count":1},{"year":2017,"cited_by_count":1},{"year":2016,"cited_by_count":1},{"year":2015,"cited_by_count":1},{"year":2014,"cited_by_count":1},{"year":2013,"cited_by_count":1},{"year":2012,"cited_by_count":1}],"updated_date":"2026-08-15T07:11:24.734988","created_date":"2025-10-10T00:00:00"}