Cluster size determination using JPEG files

Abdullah, Nurul Azma and Ibrahim, Rosziati and Mohamad, Kamaruddin Malik (2012) Cluster size determination using JPEG files. In: ICCSA'12: Proceedings of the 12th International Conference on Computational Science and Its Applications, 18-21 June 2012, Salvador de Bahia, Brazil.

Full text not available from this repository.

Official URL:


File can be recovered by simply using traditional recovery means. However, a technique is required to distinguish one file to another when dealing with hard disk with corrupted file system metadata. As in a computer file system, a cluster is the smallest allocation of disk space to hold a file, information about the cluster size can help in determining the start of file which can be used to distinguish one file to another. This paper introduces a method for acquiring the cluster size by using data sets from DFRWS 2006 and DFRWS 2007. A tool called PredClus is developed to automatically display the predicted cluster size according to probabilistic percentage. By using PredClus, the cluster size used in both DFRWS 2006 and DFRWS 2007 can be determined. Thus, JPEG images that are not located at the starting address of any cluster are most probably thumbnails or embedded files.

Item Type:Conference or Workshop Item (Paper)
Uncontrolled Keywords:DFRWS 2006/2007; JPEG files; cluster size; file carving
Subjects:Q Science > QA Mathematics > QA75 Calculating machines > QA75.5 Electronic computers. Computer science
Divisions:Faculty of Science Computer and Information Technology > Department of Software Engineering
ID Code:3568
Deposited By:Normajihan Abd. Rahman
Deposited On:11 Apr 2013 10:49
Last Modified:11 Apr 2013 10:49

Repository Staff Only: item control page