Research Article
Advanced Jpeg Carving
@INPROCEEDINGS{10.4108/e-forensics.2008.2643, author={Michael I. Cohen}, title={Advanced Jpeg Carving}, proceedings={1st International ICST Conference on Forensic Applications and Techniques in Telecommunications, Information and Multimedia}, publisher={ACM}, proceedings_a={E-FORENSICS}, year={2010}, month={5}, keywords={Data specialist Australian Federal Police Brisbane Australia}, doi={10.4108/e-forensics.2008.2643} }- Michael I. Cohen
Year: 2010
Advanced Jpeg Carving
E-FORENSICS
ACM
DOI: 10.4108/e-forensics.2008.2643
Abstract
Data carving is a digital forensic technique which aims to reconstitute a file from unstructured data sources with no knowledge of the previously stored file system. This paper presents an approach for the carving of JPEG files. Since JPEG is one of the most popular image formats in the stor- age and distribution of digital photographic imagery it is frequently of great interest for certain types of forensic in- vestigations. We apply the previously developed carving theory to the JPEG image format and develop an accurate, fully auto- mated carver. We present a novel technique for the suspension and re- sumption of the decoder, making it possible to carve JPEG images in an acceptable time.
Copyright © 2008–2025 ICST
