摘要
关键词搜索可能出现漏判,明明存在的关键词却找不到。通过分析漏判的原因,包括操作系统按簇分配存储空间导致文件跨扇区存储、文件的多种编码方案并存、FAT文件系统长文件名分隔存储、MS-DOC文件文本分块存储等,最后提出可能的解决方案。
Keyword search is a widely used method in search engine and computer forensics to find out specific words from large amounts of digital data. Sometimes however, this method may fail to find out some matches which are usually called false negatives. This paper analyzes such reasons for the false negative as the cross-sector storage of files caused by operating systems distributing space by clusters, various encoding schemes of file＇s character, separately-stored long filenames of FAT file system, and the text of MS-DOC files stored in separated blocks. At the same time, possible solutions are proposed.
出处
《信息网络安全》
2013年第4期70-71,共2页
Netinfo Security
关键词
关键词
搜索
失败
研究
计算机取证
keywords search
false negative
search engine
computer forensics
