| 摘要: |
| 细粒度的数据完整性检验可以减小因偶然的错误或个别的篡改而造成的数据失效的灾难性影响,成为计算机取证的重要需求.每份数据各自生成Hash 值的方法会产生大量的Hash 数据.因Hash 数据属于随机性数据而无法压缩,给Hash 数据存储及网络传输带来不利影响.针对细粒度数据的完整性检验问题,提出了基于纠错编码思想的细粒度数据完整性检验方法——完整性指示码,给出了完整性指示码的若干性质.设计了指示单个错误的组合单错码,分析了该码的基本性能.结果表明,该码可以轻易地达到几百倍的压缩率.得出的结论为细粒度数据完整性检验的进一步研究及相关的应用提供了理论支持. |
| 关键词: 计算机取证 Hash 数据完整性 纠错编码 取证复制 |
| DOI： |
| 分类号: |
| 基金项目:Supported by the National Natural Science Foundation of China under Grant No.60573068 (国家自然科学基金); the Program forNew Century Excellent Talents in University of China (新世纪优秀人才支持计划); the Natural Science Foundation of Chongqing of China under Grant Nos.CSTC2008BA2017, 2007BB2454 (重庆市自然科学基金); the Science & Technology Research Program of the Municipal Education Commission of Chongqing of China under Grant No.KJ060517 (重庆市教委科技计划项目) |
|
| An Integrity Check Method for Fine-Grained Data |
|
CHEN Long,WANG Guo-Yin
|
| Abstract: |
| Fine-Grained integrity check for forensic data becomes an important demand of computer forensics. It
will mitigate the disasterous effect on the data by some random errors or the intentional forging modification.Unfortunately, the traditional method generates a hash for every piece of small data and produces a large amount ofhash data. These hash data are random data and can not be compressed in a normal way. It has a great negativeimpact on storing hash data and transmitting them over network. Based on the error correction coding theory, afine-grained integrity check method, an integrity indication code, is proposed. The properties of the integrity indication code are analyzed. Combinatorial codes for one error in a group of data objects are also proposed. Hash data can be compressed hundredfold using combinatorial codes. This paper provides a fundamental support for
further research on fine-grain data integrity check method and related applications. |
| Key words: computer forensics hash data integrity error correction coding forensic duplication |
