A computer forensic method for detecting timestamp forgery in NTFS.
Gyu-Sang ChoPublished in: Comput. Secur. (2013)
Keyphrases
- high precision
- detection method
- experimental evaluation
- synthetic data
- image processing
- matching algorithm
- preprocessing
- significant improvement
- computational cost
- mutual information
- edge detection
- high accuracy
- data sets
- computational complexity
- similarity measure
- d objects
- fully automatic
- clustering method
- support vector machine
- feature selection