UTHM Institutional Repository

Cluster size determination using JPEG files

Abdullah, Nurul Azma and Ibrahim, Rosziati and Mohamad, Kamaruddin Malik (2012) Cluster size determination using JPEG files. In: ICCSA'12: Proceedings of the 12th International Conference on Computational Science and Its Applications, 18-21 June 2012, Salvador de Bahia, Brazil.

Full text not available from this repository.


File can be recovered by simply using traditional recovery means. However, a technique is required to distinguish one file to another when dealing with hard disk with corrupted file system metadata. As in a computer file system, a cluster is the smallest allocation of disk space to hold a file, information about the cluster size can help in determining the start of file which can be used to distinguish one file to another. This paper introduces a method for acquiring the cluster size by using data sets from DFRWS 2006 and DFRWS 2007. A tool called PredClus is developed to automatically display the predicted cluster size according to probabilistic percentage. By using PredClus, the cluster size used in both DFRWS 2006 and DFRWS 2007 can be determined. Thus, JPEG images that are not located at the starting address of any cluster are most probably thumbnails or embedded files.

Item Type: Conference or Workshop Item (Paper)
Uncontrolled Keywords: DFRWS 2006/2007; JPEG files; cluster size; file carving
Subjects: Q Science > QA Mathematics > QA75 Calculating machines > QA75.5 Electronic computers. Computer science
Divisions: Faculty of Computer Science and Information Technology > Department of Software Engineering
Depositing User: Normajihan Abd. Rahman
Date Deposited: 11 Apr 2013 02:49
Last Modified: 11 Apr 2013 02:49
URI: http://eprints.uthm.edu.my/id/eprint/3568
Statistic Details: View Download Statistic

Actions (login required)

View Item View Item