hh.sePublikasjoner
Endre søk
RefereraExporteraLink to record
Permanent link

Direct link
Referera
Referensformat
  • apa
  • harvard1
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Annet format
Fler format
Språk
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Annet språk
Fler språk
Utmatningsformat
  • html
  • text
  • asciidoc
  • rtf
Detektering av krypterade filer
Högskolan i Halmstad, Sektionen för Informationsvetenskap, Data– och Elektroteknik (IDE).
2011 (svensk)Independent thesis Basic level (degree of Bachelor), 10 poäng / 15 hpOppgave
Abstract [en]

In contemporary encryption the vast amount of text subject to cracking has brought about the demand for methods distinguish files more likely to be encrypted. The encryption software Truecrypt can encrypt files that are not possible to identify with a file signature. To solve the detection problem, an algorithm sensitive to the absence of structure in the very code of files was developed. The program was written in the programming language EnScript which is built into the forensic software suite EnCase. The essential part of the algorithm therefore deployes the statistic of a chi-square test for deviance from a uniform distribution to distinguish files with contents that appear to be random. The program managed to detect encrypted files that were created with Truecrypt. Test results indicate that the newly developed program is nearly double as fast and has at least the same accuracy in the detection as other pro- grams. The software is licensed under open source standard GNU GPL. The procedure developed will drastically facilitate for computer forensic experts to detect if any existing encrypted file is located on the hard drive.

sted, utgiver, år, opplag, sider
2011. , s. 28
Emneord [en]
Encrypted files, encrypted volumes, Computer forensic, EnCase, EnScript, Truecrypt, encrypted storage media
Emneord [sv]
Krypterade filer, krypterade volymer, IT-forensik, EnCase, EnScript, Truecrypt, krypterad lagringsmedia
HSV kategori
Identifikatorer
URN: urn:nbn:se:hh:diva-15723OAI: oai:DiVA.org:hh-15723DiVA, id: diva2:428544
Fag / kurs
Computer Systems Technology
Uppsök
Technology
Veileder
Examiner
Tilgjengelig fra: 2011-06-30 Laget: 2011-06-30 Sist oppdatert: 2018-01-12bibliografisk kontrollert

Open Access i DiVA

Detektering av krypterade filer - Linus Barkman(398 kB)1143 nedlastinger
Filinformasjon
Fil FULLTEXT01.pdfFilstørrelse 398 kBChecksum SHA-512
a42e349938a6fdd80112c9af7b693f54a555813d7d5281889389a11642be840c99510a1c5498781f6b2385e857f51f0ea307d6a2c52d8f516348c968440510f8
Type fulltextMimetype application/pdf

Av organisasjonen

Søk utenfor DiVA

GoogleGoogle Scholar
Totalt: 1143 nedlastinger
Antall nedlastinger er summen av alle nedlastinger av alle fulltekster. Det kan for eksempel være tidligere versjoner som er ikke lenger tilgjengelige

urn-nbn

Altmetric

urn-nbn
Totalt: 3067 treff
RefereraExporteraLink to record
Permanent link

Direct link
Referera
Referensformat
  • apa
  • harvard1
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Annet format
Fler format
Språk
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Annet språk
Fler språk
Utmatningsformat
  • html
  • text
  • asciidoc
  • rtf