NDLI: Statistical Learning for File-Type Identification

Content Provider	IEEE Xplore Digital Library
Author	Gopal, S. Yiming Yang Salomatin, K. Carbonell, J.
Copyright Year	2011
Abstract	File-type Identification (FTI) is an important problem in digital forensics, intrusion detection, and other related fields. Using state-of-the-art classification techniques to solve FTI problems has begun to receive research attention, however, general conclusions have not been reached due to the lack of thorough evaluations for method comparison. This paper presents a systematic investigation of the problem, algorithmic solutions and an evaluation methodology. Our focus is on performance comparison of statistical classifiers (e.g. SVM and kNN) and knowledge-based approaches, especially COTS (Commercial Off-The-Shelf) solutions which currently dominate FTI applications. We analyze the robustness of different methods in handling damaged files and file segments. We propose two alternative criteria in measuring performance: 1) treating file-name extensions as the true labels, and 2) treating the predictions by knowledge based approaches on intact files, these rely on signature bytes as the true labels (and removing these signature bytes before testing each method). In our experiments with simulated damages in files, SVM and kNN substantially outperform all the COTS solutions we tested, improving classification accuracy very substantially -- some COTS methods cannot identify damaged files at all.
Starting Page	68
Ending Page	73
File Size	256443
Page Count	6
File Format	PDF
ISBN	9781457721342
DOI	10.1109/ICMLA.2011.135
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2011-12-18
Publisher Place	USA
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Support vector machines Training File-type Identification Accuracy Forensics Text categorization Digital Forensics Classification Software Comparative Evaluation Testing
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

A comparative study of file-type identification techniques

Vowel Phoneme Classification Using SMO Algorithm for Training Support Vector Machines

A Comprehensive Literature Review of File Carving

A Tree-Based Multi-class SVM Classifier for Digital Library Document

Adaptive feature selection for digital camera source identification

ECG Human Identification with Statistical Support Vector Machines

Training fuzzy support vector machines by samples in zonal regions

Hierarchy-Based File Fragment Classification

Digital forensics for printed source identification

Statistical Learning for File-Type Identification

Similar Documents

A comparative study of file-type identification techniques

Vowel Phoneme Classification Using SMO Algorithm for Training Support Vector Machines

A Comprehensive Literature Review of File Carving

A Tree-Based Multi-class SVM Classifier for Digital Library Document

Adaptive feature selection for digital camera source identification

ECG Human Identification with Statistical Support Vector Machines

Training fuzzy support vector machines by samples in zonal regions

Hierarchy-Based File Fragment Classification

Digital forensics for printed source identification

Statistical Learning for File-Type Identification