1204199193
pasha.jpg
Congratulations to Pasha Pal for winning the best paper award at DFRWS 08.

ISIS PhD student 
<a href="http://isis.poly.edu/people/pasha">Pasha Pal</a> 
was given the best paper award at DFRWS 08
for his analysis of the state of the art in file carving, and development
of a powerful new method.
<p>
The paper is here: 
<a href="http://www.dfrws.org/2008/proceedings/p2-pal.pdf">
Detecting File Fragmentation Point using Sequential Hypothesis Testing</a>
<p>
<b>Abstract:</b>
File carving is a technique whereby data files are extracted
from a digital device without the assistance of file tables
or other disk meta-data. One of the primary challenges in
file carving can be found in attempting to recover files
that are fragmented. In this paper, we show how detecting
the point of fragmentation of a file can benefit fragmented
file recovery. We then present a sequential hypothesis
testing procedure to identify the frag- mentation point of a
file by sequentially comparing adjacent pairs of blocks from
the start- ing block of a file until the fragmentation point
is reached. By utilizing serial analysis we are able to
minimize the errors in detecting the fragmentation points.
The performance results obtained from the fragmented
test-sets of DFRWS 2006 and 2007 show that the method can be
effectively used in recovery of fragmented files.