FRAGMENTED JPEG FILE RECOVERY USING PSEUDO HEADERS

Abstract : Many techniques have been proposed for file recovery, but recovering fragmented files is still a challenge in digital forensics, especially when the files are damaged. This chapter focuses on JPEG files, one of the most popular photograph formats, and proposes techniques for recovering partially-damaged standalone JPEG fragments by reconstructing pseudo headers. The techniques deal with missing Huffman tables and sub-sampling factors, estimate the resolution of fragments, assess the image quality of JPEG files with incorrect quantization tables, and create quantization tables that are very close to the correct quantization tables in a reasonable amount of time. Experiments with real camera pictures demonstrate that the techniques can recover standalone fragments accurately and efficiently.
Type de document :
Communication dans un congrès
Gilbert Peterson; Sujeet Shenoi. 11th IFIP International Conference on Digital Forensics (DF), Jan 2015, Orlando, FL, United States. IFIP Advances in Information and Communication Technology, AICT-462, pp.215-231, 2015, Advances in Digital Forensics XI. 〈10.1007/978-3-319-24123-4_13〉
Liste complète des métadonnées

Littérature citée [16 références]  Voir  Masquer  Télécharger

https://hal.inria.fr/hal-01449060
Contributeur : Hal Ifip <>
Soumis le : lundi 30 janvier 2017 - 09:13:20
Dernière modification le : vendredi 1 décembre 2017 - 01:16:43

Fichier

978-3-319-24123-4_13_Chapter.p...
Fichiers produits par l'(les) auteur(s)

Licence


Distributed under a Creative Commons Paternité 4.0 International License

Identifiants

Citation

Yanbin Tang, Zheng Tan, Kam-Pui Chow, Siu-Ming Yiu, Junbin Fang, et al.. FRAGMENTED JPEG FILE RECOVERY USING PSEUDO HEADERS. Gilbert Peterson; Sujeet Shenoi. 11th IFIP International Conference on Digital Forensics (DF), Jan 2015, Orlando, FL, United States. IFIP Advances in Information and Communication Technology, AICT-462, pp.215-231, 2015, Advances in Digital Forensics XI. 〈10.1007/978-3-319-24123-4_13〉. 〈hal-01449060〉

Partager

Métriques

Consultations de la notice

62