FRAGMENTED JPEG FILE RECOVERY USING PSEUDO HEADERS - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2015

FRAGMENTED JPEG FILE RECOVERY USING PSEUDO HEADERS

Résumé

Many techniques have been proposed for file recovery, but recovering fragmented files is still a challenge in digital forensics, especially when the files are damaged. This chapter focuses on JPEG files, one of the most popular photograph formats, and proposes techniques for recovering partially-damaged standalone JPEG fragments by reconstructing pseudo headers. The techniques deal with missing Huffman tables and sub-sampling factors, estimate the resolution of fragments, assess the image quality of JPEG files with incorrect quantization tables, and create quantization tables that are very close to the correct quantization tables in a reasonable amount of time. Experiments with real camera pictures demonstrate that the techniques can recover standalone fragments accurately and efficiently.
Fichier principal
Vignette du fichier
978-3-319-24123-4_13_Chapter.pdf (991.74 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01449060 , version 1 (30-01-2017)

Licence

Paternité

Identifiants

Citer

Yanbin Tang, Zheng Tan, Kam-Pui Chow, Siu-Ming Yiu, Junbin Fang, et al.. FRAGMENTED JPEG FILE RECOVERY USING PSEUDO HEADERS. 11th IFIP International Conference on Digital Forensics (DF), Jan 2015, Orlando, FL, United States. pp.215-231, ⟨10.1007/978-3-319-24123-4_13⟩. ⟨hal-01449060⟩
78 Consultations
201 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More