{"id":"https://openalex.org/W2151686889","doi":"https://doi.org/10.1080/15567280802050436","title":"An Empirical Analysis of Disk Sector Hashes for Data Carving","display_name":"An Empirical Analysis of Disk Sector Hashes for Data Carving","publication_year":2008,"publication_date":"2008-05-27","ids":{"openalex":"https://openalex.org/W2151686889","doi":"https://doi.org/10.1080/15567280802050436","mag":"2151686889"},"language":"en","primary_location":{"id":"doi:10.1080/15567280802050436","is_oa":false,"landing_page_url":"https://doi.org/10.1080/15567280802050436","pdf_url":null,"source":{"id":"https://openalex.org/S127916260","display_name":"Journal of Digital Forensic Practice","issn_l":"1556-7281","issn":["1556-7281","1556-7346"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320547","host_organization_name":"Taylor & Francis","host_organization_lineage":["https://openalex.org/P4310320547"],"host_organization_lineage_names":["Taylor & Francis"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Digital Forensic Practice","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5077577982","display_name":"Yoginder S. Dandass","orcid":null},"institutions":[{"id":"https://openalex.org/I99041443","display_name":"Mississippi State University","ror":"https://ror.org/0432jq872","country_code":"US","type":"education","lineage":["https://openalex.org/I4210141039","https://openalex.org/I99041443"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Yoginder Singh Dandass","raw_affiliation_strings":["Mississippi State University, Computer Science and Engineering , Box 9637, Mississippi State, Mississippi, 39762, USA"],"affiliations":[{"raw_affiliation_string":"Mississippi State University, Computer Science and Engineering , Box 9637, Mississippi State, Mississippi, 39762, USA","institution_ids":["https://openalex.org/I99041443"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5050923002","display_name":"Nathan Joseph Necaise","orcid":null},"institutions":[{"id":"https://openalex.org/I99041443","display_name":"Mississippi State University","ror":"https://ror.org/0432jq872","country_code":"US","type":"education","lineage":["https://openalex.org/I4210141039","https://openalex.org/I99041443"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Nathan Joseph Necaise","raw_affiliation_strings":["Mississippi State University, Computer Science and Engineering , Box 9637, Mississippi State, Mississippi, 39762, USA"],"affiliations":[{"raw_affiliation_string":"Mississippi State University, Computer Science and Engineering , Box 9637, Mississippi State, Mississippi, 39762, USA","institution_ids":["https://openalex.org/I99041443"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5047904949","display_name":"Sherry Reede Thomas","orcid":null},"institutions":[{"id":"https://openalex.org/I99041443","display_name":"Mississippi State University","ror":"https://ror.org/0432jq872","country_code":"US","type":"education","lineage":["https://openalex.org/I4210141039","https://openalex.org/I99041443"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sherry Reede Thomas","raw_affiliation_strings":["Mississippi State University, Computer Science and Engineering , Box 9637, Mississippi State, Mississippi, 39762, USA"],"affiliations":[{"raw_affiliation_string":"Mississippi State University, Computer Science and Engineering , Box 9637, Mississippi State, Mississippi, 39762, USA","institution_ids":["https://openalex.org/I99041443"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5077577982"],"corresponding_institution_ids":["https://openalex.org/I99041443"],"apc_list":null,"apc_paid":null,"fwci":2.5379,"has_fulltext":false,"cited_by_count":19,"citation_normalized_percentile":{"value":0.92086731,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":"2","issue":"2","first_page":"95","last_page":"104"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T14339","display_name":"Image Processing and 3D Reconstruction","score":0.995199978351593,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9829999804496765,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8305996060371399},{"id":"https://openalex.org/keywords/hash-function","display_name":"Hash function","score":0.7848523855209351},{"id":"https://openalex.org/keywords/md5","display_name":"MD5","score":0.693011999130249},{"id":"https://openalex.org/keywords/digital-forensics","display_name":"Digital forensics","score":0.5832274556159973},{"id":"https://openalex.org/keywords/metadata","display_name":"Metadata","score":0.5491202473640442},{"id":"https://openalex.org/keywords/bloom-filter","display_name":"Bloom filter","score":0.5062279105186462},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.42968714237213135},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3725515604019165},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.2743069529533386},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.2580432593822479},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.1256827712059021}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8305996060371399},{"id":"https://openalex.org/C99138194","wikidata":"https://www.wikidata.org/wiki/Q183427","display_name":"Hash function","level":2,"score":0.7848523855209351},{"id":"https://openalex.org/C157172786","wikidata":"https://www.wikidata.org/wiki/Q185235","display_name":"MD5","level":3,"score":0.693011999130249},{"id":"https://openalex.org/C84418412","wikidata":"https://www.wikidata.org/wiki/Q3246940","display_name":"Digital forensics","level":2,"score":0.5832274556159973},{"id":"https://openalex.org/C93518851","wikidata":"https://www.wikidata.org/wiki/Q180160","display_name":"Metadata","level":2,"score":0.5491202473640442},{"id":"https://openalex.org/C147224247","wikidata":"https://www.wikidata.org/wiki/Q885373","display_name":"Bloom filter","level":2,"score":0.5062279105186462},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.42968714237213135},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3725515604019165},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.2743069529533386},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2580432593822479},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.1256827712059021}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1080/15567280802050436","is_oa":false,"landing_page_url":"https://doi.org/10.1080/15567280802050436","pdf_url":null,"source":{"id":"https://openalex.org/S127916260","display_name":"Journal of Digital Forensic Practice","issn_l":"1556-7281","issn":["1556-7281","1556-7346"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320547","host_organization_name":"Taylor & Francis","host_organization_lineage":["https://openalex.org/P4310320547"],"host_organization_lineage_names":["Taylor & Francis"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Digital Forensic Practice","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":10,"referenced_works":["https://openalex.org/W109683945","https://openalex.org/W1971602221","https://openalex.org/W1982290981","https://openalex.org/W1984981793","https://openalex.org/W1998518913","https://openalex.org/W2081747167","https://openalex.org/W2140223745","https://openalex.org/W2159553602","https://openalex.org/W2197070441","https://openalex.org/W3145042860"],"related_works":["https://openalex.org/W2227807207","https://openalex.org/W2370014100","https://openalex.org/W1852009617","https://openalex.org/W3137108924","https://openalex.org/W4287264924","https://openalex.org/W2042819006","https://openalex.org/W2170165007","https://openalex.org/W1979110442","https://openalex.org/W2156660460","https://openalex.org/W2362866566"],"abstract_inverted_index":{"ABSTRACT":[0],"Discovering":[1],"known":[2,70,110],"illicit":[3,35,71,111],"material":[4],"on":[5],"digital":[6,15],"storage":[7,216,228],"devices":[8],"is":[9,26,77,193],"an":[10],"important":[11],"component":[12],"of":[13,33,67,81,91,124,142,161,175,190,225,234],"a":[14,53,125,220],"forensic":[16,236],"investigation.":[17],"Using":[18],"existing":[19],"data":[20],"carving":[21],"techniques":[22],"and":[23,41,87,155,158,165,182,198,211,227],"tools,":[24],"it":[25],"typically":[27],"difficult":[28],"to":[29,59,95,168],"recover":[30],"remaining":[31],"fragments":[32],"deleted":[34],"files":[36,112,141,167],"whose":[37,63],"file":[38,42],"system":[39],"metadata":[40],"headers":[43],"have":[44],"been":[45],"overwritten":[46],"by":[47],"newer":[48],"files.":[49,72],"In":[50],"such":[51],"cases,":[52],"sector-based":[54],"scan":[55],"can":[56],"be":[57],"used":[58],"locate":[60],"those":[61,66,98],"sectors":[62,68,92,99,108,136,162,170],"content":[64],"matches":[65],"from":[69,109,138,163],"However,":[73],"brute-force":[74],"sector-by-sector":[75],"comparison":[76],"prohibitive":[78],"in":[79,93,128],"terms":[80],"time":[82],"required.":[83],"Techniques":[84],"that":[85,100,179],"compute":[86],"compare":[88],"hash-based":[89],"signatures":[90,106],"order":[94],"filter":[96],"out":[97],"do":[101],"not":[102],"produce":[103,184,205],"the":[104,117,122,130,176,188,202],"same":[105],"as":[107],"are":[113],"required":[114,230],"for":[115,132,196,231],"accelerating":[116],"process.":[118],"This":[119],"article":[120],"reports":[121],"results":[123,177],"case":[126],"study":[127],"which":[129],"hashes":[131,148,208],"over":[133,139],"528":[134],"million":[135],"extracted":[137],"433,000":[140],"different":[143],"types":[144],"were":[145,149,171],"analyzed.":[146],"The":[147,173],"computed":[150],"using":[151],"SHA1,":[152],"MD5,":[153,212],"CRC64,":[154],"CRC32":[156,197],"algorithms":[157,204],"hash":[159],"collisions":[160,226],"JPEG":[164],"WAV":[166],"other":[169],"recorded.":[172],"analysis":[174],"shows":[178],"although":[180],"MD5":[181],"SHA1":[183,210],"no":[185],"false-positive":[186],"indications,":[187],"occurrence":[189],"false":[191],"positives":[192],"relatively":[194],"low":[195],"especially":[199],"CRC64.":[200],"Furthermore,":[201],"CRC-based":[203],"considerably":[206],"smaller":[207,215],"than":[209],"thereby":[213],"requiring":[214],"capacities.":[217],"CRC64":[218],"provides":[219],"good":[221],"compromise":[222],"between":[223],"number":[224],"capacity":[229],"practical":[232],"implementations":[233],"sector-scanning":[235],"tools.":[237]},"counts_by_year":[{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":2},{"year":2021,"cited_by_count":2},{"year":2019,"cited_by_count":3},{"year":2018,"cited_by_count":1},{"year":2017,"cited_by_count":1},{"year":2016,"cited_by_count":1},{"year":2015,"cited_by_count":1},{"year":2014,"cited_by_count":1},{"year":2013,"cited_by_count":1},{"year":2012,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}