An efficient method of extracting strings from unfixed-form data

Sangjun Jeon, Jungheum Park, Keun Gi Lee, Sangjin Lee

Research output: Chapter in Book/Report/Conference proceedingConference contribution

Abstract

As all the society becomes computerized, there increases computerized data, and for digital forensic investigations, there is a great deal of unfixed-form data collected, whose exact forms are difficult to figure out, such as physical memory or page files. The most efficient method for investigating unfixed-form data is to extract strings. In case of document files, strings extracted from unfixed-form data come to include contents of the relevant documents, and in case of physical memory or page files, they can even include passwords that users have entered in addition to traces of users' using a messenger or a web page. Although extracting strings plays an important role in investigating unfixed-form data like this, the present method of extracting string includes a number of meaningless strings, while being carried out without considering the Unicode environment properly. Accordingly, this thesis intends to suggest a way of excluding meaningless strings effectively while considering the Unicode environment during the process of extracting strings.

Original languageEnglish
Title of host publicationLecture Notes in Electrical Engineering
Pages425-434
Number of pages10
Volume164 LNEE
EditionVOL. 1
DOIs
Publication statusPublished - 2012 Oct 9
Event7th FTRA International Conference on Future Information Technology, FutureTech 2012 - Vancouver, BC, Canada
Duration: 2012 Jun 262012 Jun 28

Publication series

NameLecture Notes in Electrical Engineering
NumberVOL. 1
Volume164 LNEE
ISSN (Print)18761100
ISSN (Electronic)18761119

Other

Other7th FTRA International Conference on Future Information Technology, FutureTech 2012
CountryCanada
CityVancouver, BC
Period12/6/2612/6/28

Fingerprint

Data storage equipment
Websites
Digital forensics

Keywords

  • Pagefile
  • String
  • Unallocated space

ASJC Scopus subject areas

  • Industrial and Manufacturing Engineering

Cite this

Jeon, S., Park, J., Lee, K. G., & Lee, S. (2012). An efficient method of extracting strings from unfixed-form data. In Lecture Notes in Electrical Engineering (VOL. 1 ed., Vol. 164 LNEE, pp. 425-434). (Lecture Notes in Electrical Engineering; Vol. 164 LNEE, No. VOL. 1). https://doi.org/10.1007/978-94-007-4516-2_43

An efficient method of extracting strings from unfixed-form data. / Jeon, Sangjun; Park, Jungheum; Lee, Keun Gi; Lee, Sangjin.

Lecture Notes in Electrical Engineering. Vol. 164 LNEE VOL. 1. ed. 2012. p. 425-434 (Lecture Notes in Electrical Engineering; Vol. 164 LNEE, No. VOL. 1).

Research output: Chapter in Book/Report/Conference proceedingConference contribution

Jeon, S, Park, J, Lee, KG & Lee, S 2012, An efficient method of extracting strings from unfixed-form data. in Lecture Notes in Electrical Engineering. VOL. 1 edn, vol. 164 LNEE, Lecture Notes in Electrical Engineering, no. VOL. 1, vol. 164 LNEE, pp. 425-434, 7th FTRA International Conference on Future Information Technology, FutureTech 2012, Vancouver, BC, Canada, 12/6/26. https://doi.org/10.1007/978-94-007-4516-2_43
Jeon S, Park J, Lee KG, Lee S. An efficient method of extracting strings from unfixed-form data. In Lecture Notes in Electrical Engineering. VOL. 1 ed. Vol. 164 LNEE. 2012. p. 425-434. (Lecture Notes in Electrical Engineering; VOL. 1). https://doi.org/10.1007/978-94-007-4516-2_43
Jeon, Sangjun ; Park, Jungheum ; Lee, Keun Gi ; Lee, Sangjin. / An efficient method of extracting strings from unfixed-form data. Lecture Notes in Electrical Engineering. Vol. 164 LNEE VOL. 1. ed. 2012. pp. 425-434 (Lecture Notes in Electrical Engineering; VOL. 1).
@inproceedings{0e23d2833a9c49cb8ce5bca5cbaa569e,
title = "An efficient method of extracting strings from unfixed-form data",
abstract = "As all the society becomes computerized, there increases computerized data, and for digital forensic investigations, there is a great deal of unfixed-form data collected, whose exact forms are difficult to figure out, such as physical memory or page files. The most efficient method for investigating unfixed-form data is to extract strings. In case of document files, strings extracted from unfixed-form data come to include contents of the relevant documents, and in case of physical memory or page files, they can even include passwords that users have entered in addition to traces of users' using a messenger or a web page. Although extracting strings plays an important role in investigating unfixed-form data like this, the present method of extracting string includes a number of meaningless strings, while being carried out without considering the Unicode environment properly. Accordingly, this thesis intends to suggest a way of excluding meaningless strings effectively while considering the Unicode environment during the process of extracting strings.",
keywords = "Pagefile, String, Unallocated space",
author = "Sangjun Jeon and Jungheum Park and Lee, {Keun Gi} and Sangjin Lee",
year = "2012",
month = "10",
day = "9",
doi = "10.1007/978-94-007-4516-2_43",
language = "English",
isbn = "9789400745155",
volume = "164 LNEE",
series = "Lecture Notes in Electrical Engineering",
number = "VOL. 1",
pages = "425--434",
booktitle = "Lecture Notes in Electrical Engineering",
edition = "VOL. 1",

}

TY - GEN

T1 - An efficient method of extracting strings from unfixed-form data

AU - Jeon, Sangjun

AU - Park, Jungheum

AU - Lee, Keun Gi

AU - Lee, Sangjin

PY - 2012/10/9

Y1 - 2012/10/9

N2 - As all the society becomes computerized, there increases computerized data, and for digital forensic investigations, there is a great deal of unfixed-form data collected, whose exact forms are difficult to figure out, such as physical memory or page files. The most efficient method for investigating unfixed-form data is to extract strings. In case of document files, strings extracted from unfixed-form data come to include contents of the relevant documents, and in case of physical memory or page files, they can even include passwords that users have entered in addition to traces of users' using a messenger or a web page. Although extracting strings plays an important role in investigating unfixed-form data like this, the present method of extracting string includes a number of meaningless strings, while being carried out without considering the Unicode environment properly. Accordingly, this thesis intends to suggest a way of excluding meaningless strings effectively while considering the Unicode environment during the process of extracting strings.

AB - As all the society becomes computerized, there increases computerized data, and for digital forensic investigations, there is a great deal of unfixed-form data collected, whose exact forms are difficult to figure out, such as physical memory or page files. The most efficient method for investigating unfixed-form data is to extract strings. In case of document files, strings extracted from unfixed-form data come to include contents of the relevant documents, and in case of physical memory or page files, they can even include passwords that users have entered in addition to traces of users' using a messenger or a web page. Although extracting strings plays an important role in investigating unfixed-form data like this, the present method of extracting string includes a number of meaningless strings, while being carried out without considering the Unicode environment properly. Accordingly, this thesis intends to suggest a way of excluding meaningless strings effectively while considering the Unicode environment during the process of extracting strings.

KW - Pagefile

KW - String

KW - Unallocated space

UR - http://www.scopus.com/inward/record.url?scp=84867083532&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=84867083532&partnerID=8YFLogxK

U2 - 10.1007/978-94-007-4516-2_43

DO - 10.1007/978-94-007-4516-2_43

M3 - Conference contribution

SN - 9789400745155

VL - 164 LNEE

T3 - Lecture Notes in Electrical Engineering

SP - 425

EP - 434

BT - Lecture Notes in Electrical Engineering

ER -