UTHM Institutional Repository

Fragmentation point detection of JPEG images at DHT using validator

Mohamad, Kamaruddin Malik and Mat Deris, Mustafa (2009) Fragmentation point detection of JPEG images at DHT using validator. In: FGIT '09: Proceedings of the 1st International Conference on Future Generation Information Technology, 10-12 December 2009, Jeju Island, Korea. (Unpublished)

Full text not available from this repository.


File carving is an important, practical technique for data recovery in digital forensics investigation and is particularly useful when filesystem metadata is unavailable or damaged. The research on reassembly of JPEG files with RST markers, fragmented within the scan area have been done before. However, fragmentation within Define Huffman Table (DHT) segment is yet to be resolved. This paper analyzes the fragmentation within the DHT area and list out all the fragmentation possibilities. Two main contributions are made in this paper. Firstly, three fragmentation points within DHT area are listed. Secondly, few novel validators are proposed to detect these fragmentations. The result obtained from tests done on manually fragmented JPEG files, showed that all three fragmentation points within DHT are successfully detected using validators.

Item Type: Conference or Workshop Item (Paper)
Uncontrolled Keywords: data recovery; digital evidence; digital forensics; file carving
Subjects: T Technology > TK Electrical engineering. Electronics Nuclear engineering > TK6600 Phototelegraphy. Picture telegraphy
Depositing User: Normajihan Abd. Rahman
Date Deposited: 13 Aug 2018 03:42
Last Modified: 13 Aug 2018 03:42
URI: http://eprints.uthm.edu.my/id/eprint/3743
Statistic Details: View Download Statistic

Actions (login required)

View Item View Item