SmartKex: Machine Learning Assisted SSH Keys Extraction From The Heap Dump. (arXiv:2209.05243v1 [cs.CR])

Digital forensics is the process of extracting, preserving, and documenting
evidence in digital devices. A commonly used method in digital forensics is to
extract data from the main memory of a digital device. However, the main
challenge is identifying the important data to be extracted. Several pieces of
crucial information reside in the main memory, like usernames, passwords, and
cryptographic keys such as SSH session keys. In this paper, we propose
SmartKex, a machine-learning assisted method to extract session keys …

arxiv extraction heap machine machine learning