Difference between revisions of "Imager NG Ideas"

From Forensics Wiki
Jump to: navigation, search
Line 21: Line 21:
 
= Features =
 
= Features =
 
* Compression
 
* Compression
* Integrity hash calculations
+
* Integrity checks
 
* Encryption
 
* Encryption
 
* Error correction (parity)
 
* Error correction (parity)
 
* Pre-processing during imaging
 
* Pre-processing during imaging
 +
* User suspend/resume, resume after failure
 +
* Remote imaging
  
 
== Compression ==
 
== Compression ==
 
* Reduces the amount of data that needs to be written; improved the overall imaging speed.
 
* Reduces the amount of data that needs to be written; improved the overall imaging speed.
** Hash-based imaging
+
** hash-based imaging
 
** detection of easy (emtpy-block) and hard (encrypted block) to compress data
 
** detection of easy (emtpy-block) and hard (encrypted block) to compress data
 
** multi-threaded compression
 
** multi-threaded compression
 
** sparse ranges
 
** sparse ranges
 
** de-duplication
 
** de-duplication
 +
 +
== Integrity checks ==
 +
* Integrity hash (MD5, SHA1, SHA256)
 +
* piecewise hashing
  
 
[[Category:Research]]
 
[[Category:Research]]

Revision as of 00:44, 6 September 2012

This page is for discussing ideas regarding next-generation (NG) imaging tools.

Note that some of the ideas mentioned can be already used by imaging tools, but the idea of this page is to determine how useful these features could be for next-generation of imaging tools. The scope is mainly a software-based imaging tools, but not limited to. Some features might not be doable, because of limitations of certain image file formats.

Please, do not delete text (ideas) here. Use something like this:

<s>bad idea</s>
good idea

This will look like:

bad idea

good idea

Contents

License

Features

  • Compression
  • Integrity checks
  • Encryption
  • Error correction (parity)
  • Pre-processing during imaging
  • User suspend/resume, resume after failure
  • Remote imaging

Compression

  • Reduces the amount of data that needs to be written; improved the overall imaging speed.
    • hash-based imaging
    • detection of easy (emtpy-block) and hard (encrypted block) to compress data
    • multi-threaded compression
    • sparse ranges
    • de-duplication

Integrity checks

  • Integrity hash (MD5, SHA1, SHA256)
  • piecewise hashing