Identification and recovery of JPEG files with missing fragments

Husrev T. Sencar*, Nasir Memon

*Corresponding author for this work

Research output: Contribution to conferencePaperpeer-review

18 Citations (Scopus)

Abstract

Recovery of fragmented files proves to be a challenging task for encoded files like JPEG. In this paper, we consider techniques for addressing two issues related to fragmented JPEG file recovery. First issue concerns more efficient identification of the next fragment of a file undergoing recovery. Second issue concerns the recovery of file fragments which cannot be linked to an existing image header or for which there is no available image header. Current file recovery approaches are not well suited to deal with these practical issues. In addressing these problems, we utilize JPEG file format specifications. More specifically, we propose a technique based on bit sequence matching to identify fragments created by the same Huffman code tables. We also address the construction of a pseudo header needed for recovery of stand-alone file fragments. Some experimental results are provided to support our claims.

Original languageEnglish
PagesS88-S98
Publication statusPublished - 2009
Externally publishedYes
Event9th Annual Digital Forensic Research Workshop, DFRWS 2009 - Montreal, QC, Canada
Duration: 17 Aug 200919 Aug 2009

Conference

Conference9th Annual Digital Forensic Research Workshop, DFRWS 2009
Country/TerritoryCanada
CityMontreal, QC
Period17/08/0919/08/09

Keywords

  • File recovery
  • Fragmentation
  • Huffman code tables
  • JPEG/JFIF

Fingerprint

Dive into the research topics of 'Identification and recovery of JPEG files with missing fragments'. Together they form a unique fingerprint.

Cite this