利用图形处理器实现基于散列的数据雕刻的并行化
Using Graphics Processors for Parallelizing Hash-based Data Carving
摘要：
检测已删除图像文件的片段并从磁盘上所有可用片段重建这些图像文件的能力是数字取证领域的关键活动。虽然从磁盘上的文件片段重建映像文件可以通过简单地将磁盘上扇区的内容与已知文件的内容进行比较来完成，但这种蛮力方法可能很耗时。本文介绍了使用图形处理单元（GPU）在磁盘集群中检测特定图像文件字节模式的研究结果。将每个磁盘扇区的唯一识别图案与已知图像中的图案进行比较。模式匹配表示可能存在图像，并标记磁盘扇区以进行进一步深入检查，以确认匹配。基于GPU的实现方式明显优于软件实现方式。
英文摘要：
The ability to detect fragments of deleted image files and to reconstruct these image files from all available fragments on disk is a key activity in the field of digital forensics. Although reconstruction of image files from the file fragments on disk can be accomplished by simply comparing the content of sectors on disk with the content of known files, this brute-force approach can be time consuming. This paper presents results from research into the use of Graphics Processing Units (GPUs) in detecting specific image file byte patterns in disk clusters. Unique identifying pattern for each disk sector is compared against patterns in known images. A pattern match indicates the potential presence of an image and flags the disk sector for further in-depth examination to confirm the match. The GPU-based implementation outperforms the software implementation by a significant margin.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
