Recovery of media files from flash memory
File carving is a vital, practical technique used for data recovery in digital forensics investigation and is exceptionally useful when filesystem metadata is unobtainable or damaged. JPEG is a highly popular picture file compression algorithm that is widely used worldwide. There are various file re...
Saved in:
| Main Author: | |
|---|---|
| Other Authors: | |
| Format: | Final Year Project |
| Language: | English |
| Published: |
Nanyang Technological University
2022
|
| Subjects: | |
| Online Access: | https://hdl.handle.net/10356/157986 |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| Institution: | Nanyang Technological University |
| Language: | English |
| Summary: | File carving is a vital, practical technique used for data recovery in digital forensics investigation and is exceptionally useful when filesystem metadata is unobtainable or damaged. JPEG is a highly popular picture file compression algorithm that is widely used worldwide. There are various file recovery tools that enable us to recover corrupted JPEG files. More often than not, JPEG files are stored in fragments in different orders which makes file recovery much more difficult. To recover JPEG files, one is unable to look past the use of JPEG markers and the similarity of neighbouring pixels that help dictate if the data blocks belong to the same file or fragmentation point identification. In this paper, we propose another similarity technique (CVD) to assess if two sectors of identical JPEG file are correctly arranged consecutively with a new fragmentation point detection algorithm. |
|---|