Advanced Jpeg Carving

Michael I.  Cohen

1st International ICST Conference on Forensic Applications and Techniques in Telecommunications, Information and Multimedia

Research Article

Advanced Jpeg Carving

Cite: BibTeX Plain Text

@INPROCEEDINGS{10.4108/e-forensics.2008.2643,
    author={Michael I.  Cohen},
    title={Advanced Jpeg Carving},
    proceedings={1st International ICST Conference on Forensic Applications and Techniques in Telecommunications, Information and Multimedia},
    publisher={ACM},
    proceedings_a={E-FORENSICS},
    year={2010},
    month={5},
    keywords={Data specialist Australian Federal Police Brisbane Australia},
    doi={10.4108/e-forensics.2008.2643}
}

Michael I. Cohen
Year: 2010
Advanced Jpeg Carving
E-FORENSICS
ACM
DOI: 10.4108/e-forensics.2008.2643

Michael I. Cohen¹^,*

1: Australian Federal Police, Brisbane, Australia.

*Contact email: scudette@gmail.com

Abstract

Data carving is a digital forensic technique which aims to reconstitute a file from unstructured data sources with no knowledge of the previously stored file system. This paper presents an approach for the carving of JPEG files. Since JPEG is one of the most popular image formats in the stor- age and distribution of digital photographic imagery it is frequently of great interest for certain types of forensic in- vestigations. We apply the previously developed carving theory to the JPEG image format and develop an accurate, fully auto- mated carver. We present a novel technique for the suspension and re- sumption of the decoder, making it possible to carve JPEG images in an acceptable time.

Keywords: Data specialist Australian Federal Police Brisbane Australia

Published: 2010-05-16
Publisher: ACM
Modified: 2010-05-16

: http://dx.doi.org/10.4108/e-forensics.2008.2643