Fragmented JPEG file recovery using pseudo headers

Yanbin Tang; Zheng Tan; Kam Pui Chow; Siu Ming Yiu; Junbin Fang; Xiamu Niu; Qi Han; Xianyan Wu

doi:10.1007/978-3-319-24123-4_13

Fragmented JPEG file recovery using pseudo headers

Yanbin Tang
, Zheng Tan
, Kam Pui Chow
, Siu Ming Yiu
, Junbin Fang
, Xiamu Niu
, Qi Han
, Xianyan Wu

The University of Hong Kong
Jinan University
Harbin Institute of Technology Shenzhen

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

Abstract

Many techniques have been proposed for file recovery, but recovering fragmented files is still a challenge in digital forensics, especially when the files are damaged. This chapter focuses on JPEG files, one of the most popular photograph formats, and proposes techniques for recovering partially-damaged standalone JPEG fragments by reconstructing pseudo headers. The techniques deal with missing Huffman tables and sub-sampling factors, estimate the resolution of fragments, assess the image quality of JPEG files with incorrect quantization tables, and create quantization tables that are very close to the correct quantization tables in a reasonable amount of time. Experiments with real camera pictures demonstrate that the techniques can recover standalone fragments accurately and efficiently.

Original language	English
Title of host publication	Advances in Digital Forensics XI - 11th IFIP WG 11.9 International Conference, Revised Selected Papers
Editors	Sujeet Shenoi, Gilbert Peterson
Publisher	Springer New York LLC
Pages	215-231
Number of pages	17
ISBN (Print)	9783319241227
DOIs	https://doi.org/10.1007/978-3-319-24123-4_13
State	Published - 2015
Externally published	Yes
Event	11th IFIP WG 11.9 International Conference on Digital Forensics, 2015 - Orlando, United States Duration: 26 Jan 2015 → 28 Jan 2015

Publication series

Name	IFIP Advances in Information and Communication Technology
Volume	462
ISSN (Print)	1868-4238

Conference

Conference	11th IFIP WG 11.9 International Conference on Digital Forensics, 2015
Country/Territory	United States
City	Orlando
Period	26/01/15 → 28/01/15

Keywords

File recovery
JPEG fragments
Pseudo headers

Access to Document

10.1007/978-3-319-24123-4_13

Cite this

Tang, Y., Tan, Z., Chow, K. P., Yiu, S. M., Fang, J., Niu, X., Han, Q., & Wu, X. (2015). Fragmented JPEG file recovery using pseudo headers. In S. Shenoi, & G. Peterson (Eds.), Advances in Digital Forensics XI - 11th IFIP WG 11.9 International Conference, Revised Selected Papers (pp. 215-231). (IFIP Advances in Information and Communication Technology; Vol. 462). Springer New York LLC. https://doi.org/10.1007/978-3-319-24123-4_13

@inproceedings{bd2536b58e7348a0a64e3dda69132bfc,

title = "Fragmented JPEG file recovery using pseudo headers",

abstract = "Many techniques have been proposed for file recovery, but recovering fragmented files is still a challenge in digital forensics, especially when the files are damaged. This chapter focuses on JPEG files, one of the most popular photograph formats, and proposes techniques for recovering partially-damaged standalone JPEG fragments by reconstructing pseudo headers. The techniques deal with missing Huffman tables and sub-sampling factors, estimate the resolution of fragments, assess the image quality of JPEG files with incorrect quantization tables, and create quantization tables that are very close to the correct quantization tables in a reasonable amount of time. Experiments with real camera pictures demonstrate that the techniques can recover standalone fragments accurately and efficiently.",

keywords = "File recovery, JPEG fragments, Pseudo headers",

author = "Yanbin Tang and Zheng Tan and Chow, \{Kam Pui\} and Yiu, \{Siu Ming\} and Junbin Fang and Xiamu Niu and Qi Han and Xianyan Wu",

note = "Publisher Copyright: {\textcopyright} IFIP International Federation for Information Processing 2015.; 11th IFIP WG 11.9 International Conference on Digital Forensics, 2015 ; Conference date: 26-01-2015 Through 28-01-2015",

year = "2015",

doi = "10.1007/978-3-319-24123-4\_13",

language = "英语",

isbn = "9783319241227",

series = "IFIP Advances in Information and Communication Technology",

publisher = "Springer New York LLC",

pages = "215--231",

editor = "Sujeet Shenoi and Gilbert Peterson",

booktitle = "Advances in Digital Forensics XI - 11th IFIP WG 11.9 International Conference, Revised Selected Papers",

}

Tang, Y, Tan, Z, Chow, KP, Yiu, SM, Fang, J, Niu, X, Han, Q & Wu, X 2015, Fragmented JPEG file recovery using pseudo headers. in S Shenoi & G Peterson (eds), Advances in Digital Forensics XI - 11th IFIP WG 11.9 International Conference, Revised Selected Papers. IFIP Advances in Information and Communication Technology, vol. 462, Springer New York LLC, pp. 215-231, 11th IFIP WG 11.9 International Conference on Digital Forensics, 2015, Orlando, United States, 26/01/15. https://doi.org/10.1007/978-3-319-24123-4_13

Fragmented JPEG file recovery using pseudo headers. / Tang, Yanbin; Tan, Zheng; Chow, Kam Pui et al.
Advances in Digital Forensics XI - 11th IFIP WG 11.9 International Conference, Revised Selected Papers. ed. / Sujeet Shenoi; Gilbert Peterson. Springer New York LLC, 2015. p. 215-231 (IFIP Advances in Information and Communication Technology; Vol. 462).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Fragmented JPEG file recovery using pseudo headers

AU - Tang, Yanbin

AU - Tan, Zheng

AU - Chow, Kam Pui

AU - Yiu, Siu Ming

AU - Fang, Junbin

AU - Niu, Xiamu

AU - Han, Qi

AU - Wu, Xianyan

N1 - Publisher Copyright: © IFIP International Federation for Information Processing 2015.

PY - 2015

Y1 - 2015

N2 - Many techniques have been proposed for file recovery, but recovering fragmented files is still a challenge in digital forensics, especially when the files are damaged. This chapter focuses on JPEG files, one of the most popular photograph formats, and proposes techniques for recovering partially-damaged standalone JPEG fragments by reconstructing pseudo headers. The techniques deal with missing Huffman tables and sub-sampling factors, estimate the resolution of fragments, assess the image quality of JPEG files with incorrect quantization tables, and create quantization tables that are very close to the correct quantization tables in a reasonable amount of time. Experiments with real camera pictures demonstrate that the techniques can recover standalone fragments accurately and efficiently.

AB - Many techniques have been proposed for file recovery, but recovering fragmented files is still a challenge in digital forensics, especially when the files are damaged. This chapter focuses on JPEG files, one of the most popular photograph formats, and proposes techniques for recovering partially-damaged standalone JPEG fragments by reconstructing pseudo headers. The techniques deal with missing Huffman tables and sub-sampling factors, estimate the resolution of fragments, assess the image quality of JPEG files with incorrect quantization tables, and create quantization tables that are very close to the correct quantization tables in a reasonable amount of time. Experiments with real camera pictures demonstrate that the techniques can recover standalone fragments accurately and efficiently.

KW - File recovery

KW - JPEG fragments

KW - Pseudo headers

UR - https://www.scopus.com/pages/publications/84951815061

U2 - 10.1007/978-3-319-24123-4_13

DO - 10.1007/978-3-319-24123-4_13

M3 - 会议稿件

AN - SCOPUS:84951815061

SN - 9783319241227

T3 - IFIP Advances in Information and Communication Technology

SP - 215

EP - 231

BT - Advances in Digital Forensics XI - 11th IFIP WG 11.9 International Conference, Revised Selected Papers

A2 - Shenoi, Sujeet

A2 - Peterson, Gilbert

PB - Springer New York LLC

T2 - 11th IFIP WG 11.9 International Conference on Digital Forensics, 2015

Y2 - 26 January 2015 through 28 January 2015

ER -

Tang Y, Tan Z, Chow KP, Yiu SM, Fang J, Niu X et al. Fragmented JPEG file recovery using pseudo headers. In Shenoi S, Peterson G, editors, Advances in Digital Forensics XI - 11th IFIP WG 11.9 International Conference, Revised Selected Papers. Springer New York LLC. 2015. p. 215-231. (IFIP Advances in Information and Communication Technology). doi: 10.1007/978-3-319-24123-4_13

Fragmented JPEG file recovery using pseudo headers

Abstract

Publication series

Conference

Keywords

Access to Document

Other files and links

Fingerprint

Cite this