Abstract
Many studies have been conducted in addressing problem of fragmented JPEG. However, there are many scenarios in fragmentation yet to be solved. This paper is discussing of using pattern matching to identify single linear fragmented JPEG images. The main contribution of this paper is introducing Unique Hex Patterns (UHP) to carve single linear fragmented JPEG images.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
References
S. L. Garfinkel, “Digital Forensic Research :The next 10 years,” Digital Investigation, vol. 7(1), 2010, pp. S64-S73.
M. I. Cohen, “Advanced Carving Techniques,” Digital Investigation, vol. 4(1-4), 2007, pp. 119-128.
S. L. Garfinkel, “Carving Contiguous and Fragmented Files with Fast Object Validation,” Digital Investigation, vol. 4(1), 2007, pp. S2-S12.
S. J. J. Kloet, Measuring and Improving the Quality of File Carving Methods, Master Thesis, Endhoven University of Technology, 2007.
C. J. Veenman, Statistical Disk Cluster Classification for FIle Carving. Proc. of the Third International Symposium on Information Assurance and Security, Machester, 2007.
K. M. Mohamad, M. Mat Deris, Fragmentation Point Detection of JPEG Images at DHT Using Validator. Proc. of the 2009 FGIT, 2009, pp.173-180.
A., Pal, & N. Memon, “Automated reassembly of the file fragmented images using greedy algorithms,” IEEE Trans. Image Processing, vol. 15(2), pp. 385-393, 2003.
M. Karresand, & N. Shahmehri, Reassembly of fragmented jpeg images containing restart markers. in 2008 European conference on computer network defense, 2008.
The International Telegraph and Telephone Consultative Committee (CCITT). Information technology—digital compression and coding of continuous-tone still images–requirements and guideline (ITU-T T.81), 1992. Retrieved Sept. 5, 2012, from World Wide Web Consortium (W3C): http://www.w3.org/Graphics/JPEG/itu-t81.pdf
S. Bettelli, “ The structure of JPEG pictures,” 2006. Retrieved Sept. 5, 2012 from : http://search.cpan.org/dist/Image-MetaData-JPEG/lib/Image/MetaData/JPEG/Structures.pod
Pal, J. T. Sencar, & N. Memon, “Detecting File Fragmentation Point Using Sequential Hypothesis Testing,” Digital Investigation,vol. 5, 2008, pp. S2-S13 2008.
K. M. Mohamad, & M. Mat Deris, Visualization of JPEG metadata. in: Proceeding of the 2009 first International Visual Informatics Conference on Visual Informatics,2009.
P. Alvarez, “Using extended file information (exif) file headers in digital evidence analysis,” International Journal of Digital Evidence. Vol. 2(3), 2004.
K.M. Mohamad, A. Patel, T. Herawan, & M. Mat Deris, “myKarve: JPEG image and thumbnail carver,” Journal of Digital Forensic Practice, vol. 3, 2011, pp. 74-97.
N. A. Abdullah, R. Ibrahim, & K. M. Mohamad, Cluster size determination using JPEG files. in Proceedings of the 12th international conference on Computational Science and Its Applications, 2012.
S. W. Ng, “Advances in Disk Technology: Performance Issues,” Computer, vol. 31,1998, pp. 75-81.
File Allocation Table, http://en.wikipedia.org/wiki/File_Allocation_Table#Boot_Sector
R. P. Jemigan & S. D. Quinn, Two-Pass Defragmentation of Compressed Hard Disk Data with a Single Data Rewrite. U.S Patent 5574907 .
Cluster Size for NTFS, FAT, and ExFAT, http://support.microsoft.com/kb/140365
N. A. Abdullah, R. Ibrahim & K. M. Mohamad, “ Carving Thumbnail/s and Embedded JPEG Files Using Image Pattern Matching, “ JSEA, vol. 6, 2013, pp. 62-66.
Acknowledgement
The authors would like to thank Ministry of Science, Technology and Innovation (MOSTI), for granting Science Fund (Vote s019) to support this research.
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2014 Springer Science+Business Media Singapore
About this paper
Cite this paper
Abdullah, N.A., Ibrahim, R., Mohamad, K.M., Hamid, N.A. (2014). Carving Linearly JPEG Images Using Unique Hex Patterns (UHP). In: Herawan, T., Deris, M., Abawajy, J. (eds) Proceedings of the First International Conference on Advanced Data and Information Engineering (DaEng-2013). Lecture Notes in Electrical Engineering, vol 285. Springer, Singapore. https://doi.org/10.1007/978-981-4585-18-7_33
Download citation
DOI: https://doi.org/10.1007/978-981-4585-18-7_33
Published:
Publisher Name: Springer, Singapore
Print ISBN: 978-981-4585-17-0
Online ISBN: 978-981-4585-18-7
eBook Packages: EngineeringEngineering (R0)