TY - GEN
T1 - Automatic reassembly of document fragments via context based statistical models
AU - Shanmugasundaram, Kulesh
AU - Memon, Nasir
PY - 2003
Y1 - 2003
N2 - Reassembly of fragmented objects from a collection of randomly mixed fragments is a common problem in classical forensics. We address the digital forensic equivalent, i.e., reassembly of document fragments, using statistical modelling tools applied in data compression. We propose a general process model for automatically analyzing a collection fragments to reconstruct the original document by placing the fragments in proper order. Probabilities are assigned to the likelihood that two given fragments are adjacent in the original using context modelling techniques in data compression. The problem of finding the optimal ordering is shown to be equivalent to finding a maximum weight Hamiltonian path in a complete graph. Heuristics are designed and explored and implementation results provided which demonstrate the validity of the proposed technique.
AB - Reassembly of fragmented objects from a collection of randomly mixed fragments is a common problem in classical forensics. We address the digital forensic equivalent, i.e., reassembly of document fragments, using statistical modelling tools applied in data compression. We propose a general process model for automatically analyzing a collection fragments to reconstruct the original document by placing the fragments in proper order. Probabilities are assigned to the likelihood that two given fragments are adjacent in the original using context modelling techniques in data compression. The problem of finding the optimal ordering is shown to be equivalent to finding a maximum weight Hamiltonian path in a complete graph. Heuristics are designed and explored and implementation results provided which demonstrate the validity of the proposed technique.
UR - http://www.scopus.com/inward/record.url?scp=84944746002&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=84944746002&partnerID=8YFLogxK
U2 - 10.1109/CSAC.2003.1254320
DO - 10.1109/CSAC.2003.1254320
M3 - Conference contribution
AN - SCOPUS:84944746002
T3 - Proceedings - Annual Computer Security Applications Conference, ACSAC
SP - 152
EP - 159
BT - Proceedings - 19th Annual Computer Security Applications Conference, ACSAC 2003
PB - IEEE Computer Society
T2 - 19th Annual Computer Security Applications Conference, ACSAC 2003
Y2 - 8 December 2003 through 12 December 2003
ER -