FRAGMENTED JPEG FILE RECOVERY USING PSEUDO HEADERS - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2015

FRAGMENTED JPEG FILE RECOVERY USING PSEUDO HEADERS

Abstract

Many techniques have been proposed for file recovery, but recovering fragmented files is still a challenge in digital forensics, especially when the files are damaged. This chapter focuses on JPEG files, one of the most popular photograph formats, and proposes techniques for recovering partially-damaged standalone JPEG fragments by reconstructing pseudo headers. The techniques deal with missing Huffman tables and sub-sampling factors, estimate the resolution of fragments, assess the image quality of JPEG files with incorrect quantization tables, and create quantization tables that are very close to the correct quantization tables in a reasonable amount of time. Experiments with real camera pictures demonstrate that the techniques can recover standalone fragments accurately and efficiently.
Fichier principal
Vignette du fichier
978-3-319-24123-4_13_Chapter.pdf (991.74 Ko) Télécharger le fichier
Origin : Files produced by the author(s)
Loading...

Dates and versions

hal-01449060 , version 1 (30-01-2017)

Licence

Attribution

Identifiers

Cite

Yanbin Tang, Zheng Tan, Kam-Pui Chow, Siu-Ming Yiu, Junbin Fang, et al.. FRAGMENTED JPEG FILE RECOVERY USING PSEUDO HEADERS. 11th IFIP International Conference on Digital Forensics (DF), Jan 2015, Orlando, FL, United States. pp.215-231, ⟨10.1007/978-3-319-24123-4_13⟩. ⟨hal-01449060⟩
73 View
162 Download

Altmetric

Share

Gmail Facebook Twitter LinkedIn More