FiFTy: Large-scale File Fragment Type Identification using Neural Networks

08/16/2019 ∙ by Govind Mittal, et al. ∙ 0

We present FiFTy, a modern file type identification tool for memory forensics and data carving. In contrast to previous approaches based on hand-crafted features, we design a compact neural network architecture, which uses a trainable embedding space, akin to successful natural language processing models. Our approach dispenses with explicit feature extraction which is a bottleneck in legacy systems. We evaluate the proposed method on a novel dataset with 75 file types - the most diverse and balanced dataset reported to date. FiFTy consistently outperforms all baselines in terms of speed, accuracy and individual misclassification rates. We achieved an average accuracy of 77.5 an order of magnitude faster than the previous state-of-the-art tool - Sceadan (69 publicly online.

READ FULL TEXT
POST COMMENT

Comments

There are no comments yet.

Authors

page 24

page 25

This week in AI

Get the week's most popular data science and artificial intelligence research sent straight to your inbox every Saturday.