Forensic Examination of Encrypted Containers

Forensic Examination of Encrypted Containers

Machine Learning-based System to Support Forensics Examination of Encrypted Data Containers: The widespread availability of encryption software has enabled cyber criminals to encrypt sensitive or illegal materials, such as those related to a terrorist act. In this project, the Cyber Science Lab at the University of Guelph provides LEAs with a machine learning-based system that can be used to detect, analyze and triage encrypted data containers without the need to first decrypt the content. The system is leveraging “fuzzy deep learning” techniques to provide the degree of similarity between properties of the encrypted materials and properties of previously known contraband materials.