SYSTEM AND METHOD FOR HIGH SPEED SEARCH FOR LARGE-SCALE DIGITAL FORENSIC INVESTIGATION

摘要

A system and a method for searching massive data at high speed in a digital forensic system are provided to correctly and quickly search a desired keyword and regular expression through bitwise search, and improve search reliability and speed by rearranging clusters of each file in a massive disk image and converting formatted files into a text file. An image storing module(300) stores a disk image of a disk to be searched. An analysis module(200) analyzes a cluster storing files in the disk by analyzing the disk image received from the image storing module. A high speed search module(100) outputs a search result by searching a keyword from the disk image received from the image storing module.