Classification and Recovery of Fragmented Multimedia Files using the File Carving Approach

نویسندگان

  • Rainer Poisel
  • Marlies Rybnicek
  • Bernhard Schildendorfer
  • Simon Tjoa
چکیده

File carving is a recovery technique which does not consider file tables or other meta-data which is used to organize data on storage media. As files can be recovered based only on their content and/or structure, this technique is an indispensable task during digital investigations. The main contribution of this paper is the description of procedures that allow for successful content-based recovery of multimedia files from their fragments. So far many approaches for the recovery of digital images have been proposed. After a short discussion of relevant representatives in this domain the authors focus on the applicability of these approaches to the recovery of multimedia files. Classification and Recovery of Fragmented Multimedia Files using the File Carving Approach

برای دانلود متن کامل این مقاله و بیش از 32 میلیون مقاله دیگر ابتدا ثبت نام کنید

ثبت نام

اگر عضو سایت هستید لطفا وارد حساب کاربری خود شوید

منابع مشابه

Advanced File Carving Approaches for Multimedia Files

File carving is a recovery technique that recovers files based on information about their structure and content without matching file system information. As files can be recovered from their content and/or file structure this technique is indispensable during digital forensics investigations. So far many approaches for the recovery of digital images have been proposed. The main contribution of ...

متن کامل

Optimal Path Construction for Fragmented File Carving

Fragmented File carving is an important technique in Digital Forensics to recover files from their fragments in the absence of the file system allocation information. In this paper, the fragmented file carving problem is formulated as a graph theoretic problem. Using this model, we describe two algorithms, “Optimal Carve” and “Probabilistic-based Carve”, to perform file reconstruction and recov...

متن کامل

Carving Contiguous and Fragmented Files with Object Validation

‘‘File carving’’ reconstructs files based on their content, rather than using metadata that points to the content. Carving is widely used for forensics and data recovery, but no file carvers can automatically reassemble fragmented files. We survey files from more than 300 hard drives acquired on the secondary market and show that the ability to reassemble fragmented files is an important requir...

متن کامل

A Novel Inequality-Based Fragmented File Carving Technique

Fragmented File carving is an important technique in Digital Forensics to recover files from their fragments in the absence of the file system allocation information. In this paper, the fragmented file carving problem is formulated as a graph theoretic problem. Using this model, we describe two algorithms, “Best Path Search” and “High Fragmentation Path Search”, to perform file reconstruction a...

متن کامل

Performance Analysis of File Carving Tools

File carving is the process of recovering files based on the contents of a file in scenarios where file system metadata is unavailable. In this research a total of 6 file carving tools were tested and reviewed to evaluate the performance quality of each. Comparison of findings to a previous similar study was conducted and showed variable performance advances. A new file carving data set was als...

متن کامل

ذخیره در منابع من


  با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید

برای دانلود متن کامل این مقاله و بیش از 32 میلیون مقاله دیگر ابتدا ثبت نام کنید

ثبت نام

اگر عضو سایت هستید لطفا وارد حساب کاربری خود شوید

عنوان ژورنال:
  • IJMCMC

دوره 5  شماره 

صفحات  -

تاریخ انتشار 2013