File Fragment Classification using Light-Weight Convolutional Neural Networks

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Ghaleb, Mustafa, Saaim, Kunwar, Felemban, Muhamad, Al-Saleh, Saleh, Al-Mulhem, Ahmad
Format: Preprint
Published: 2023
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866909577031712768
author Ghaleb, Mustafa
Saaim, Kunwar
Felemban, Muhamad
Al-Saleh, Saleh
Al-Mulhem, Ahmad
author_facet Ghaleb, Mustafa
Saaim, Kunwar
Felemban, Muhamad
Al-Saleh, Saleh
Al-Mulhem, Ahmad
contents In digital forensics, file fragment classification is an important step toward completing file carving process. There exist several techniques to identify the type of file fragments without relying on meta-data, such as using features like header/footer and N-gram to identify the fragment type. Recently, convolutional neural network (CNN) models have been used to build classification models to achieve this task. However, the number of parameters in CNNs tends to grow exponentially as the number of layers increases. This results in a dramatic increase in training and inference time. In this paper, we propose light-weight file fragment classification models based on depthwise separable CNNs. The evaluation results show that our proposed models provide faster inference time with comparable accuracy as compared to the state-of-art CNN based models. In particular, our models were able to achieve an accuracy of 79\% on the FFT-75 dataset with nearly 100K parameters and 164M FLOPs, which is 4x smaller and 6x faster than the state-of-the-art classifier in the literature.
format Preprint
id arxiv_https___arxiv_org_abs_2305_00656
institution arXiv
publishDate 2023
record_format arxiv
spellingShingle File Fragment Classification using Light-Weight Convolutional Neural Networks
Ghaleb, Mustafa
Saaim, Kunwar
Felemban, Muhamad
Al-Saleh, Saleh
Al-Mulhem, Ahmad
Cryptography and Security
In digital forensics, file fragment classification is an important step toward completing file carving process. There exist several techniques to identify the type of file fragments without relying on meta-data, such as using features like header/footer and N-gram to identify the fragment type. Recently, convolutional neural network (CNN) models have been used to build classification models to achieve this task. However, the number of parameters in CNNs tends to grow exponentially as the number of layers increases. This results in a dramatic increase in training and inference time. In this paper, we propose light-weight file fragment classification models based on depthwise separable CNNs. The evaluation results show that our proposed models provide faster inference time with comparable accuracy as compared to the state-of-art CNN based models. In particular, our models were able to achieve an accuracy of 79\% on the FFT-75 dataset with nearly 100K parameters and 164M FLOPs, which is 4x smaller and 6x faster than the state-of-the-art classifier in the literature.
title File Fragment Classification using Light-Weight Convolutional Neural Networks
topic Cryptography and Security
url https://arxiv.org/abs/2305.00656