Using multiple GPUs to accelerate string searching for digital forensic analysis
Division of Computing and Mathematics, Abertay University, Dundee School of Computing Science and Digital Media, Robert Gordon University, Aberdeen
1th International Conference on Systematic Approaches to Digital Forensic Engineering (SADFE 2016), 2016
@inproceedings{bayne2016using,
title={Using multiple GPUs to accelerate string searching for digital forensic analysis},
author={Bayne, Ethan and Ferguson, R Ian and Sampson, Adam T and Isaacs, John},
booktitle={Proceedings of the 11th International Conference on Systematic Approaches to Digital Forensic Engineering (SADFE 2016)},
year={2016},
organization={Association of Digital Forensics, Security and Law (ADFSL)}
}
String searching within a large corpus of data is an important component of digital forensic (DF) analysis techniques such as file carving. The continuing increase in capacity of consumer storage devices requires corresponding im-provements to the performance of string searching techniques. As string search-ing is a trivially-parallelisable problem, GPGPU approaches are a natural fit – but previous studies have found that local storage presents an insurmountable performance bottleneck. We show that this need not be the case with modern hardware, and demonstrate substantial performance improvements from the use of single and multiple GPUs when searching for strings within a typical forensic disk image.
November 10, 2016 by hgpu
