A byte sequence is worth an image: CNN for file fragment classification using bit shift and n-gram embeddings

• Main Authors: Liu, Wenyang, Wang, Yi, Wu, Kejun, Yap, Kim-Hui, Chau, Lap-Pui
• Other Authors: School of Electrical and Electronic Engineering
• Format: Conference or Workshop Item
• Language: English
• Published: 2024
• Subjects: Computer and Information Science; Convolutional Neural Networks; File fragment classification; Byte2image; Memory forensics
• Online Access: https://hdl.handle.net/10356/174534
• Institution: Nanyang Technological University

File fragment classification (FFC) on small chunks of memory is essential in memory forensics and Internet security. Existing methods mainly treat file fragments as 1d byte signals and utilize the captured inter-byte features for classification, while the bit information within bytes, i.e., intra-by...