A review of digital forensics methods for JPEG file carving

ALI, RABEI RAAD and MOHAMAD, KAMARUDDIN MALIK and JAMEL, SAPIEE and Ahmad Khalid, Shamsul Kamal (2018) A review of digital forensics methods for JPEG file carving. Journal of Theoretical and Applied Information Technology, 96 (17). pp. 5841-5856. ISSN 1992-8645

Text AJ 2018 (759) A review of digital forensics methods for JPEG file carving.pdf Restricted to Registered users only Download (854kB) | Request a copy

Abstract

Digital forensics is an important field of cybersecurity and digital crimes investigation. It entails applying file recovery methods to analyze data from storage media and extract hidden, deleted or overwritten files. The recovery process might have accompanied with cases of unallocated partitions of blocks or clusters and the absence of file system metadata. These cases entail advance recovery methods that have carving abilities. The file carving methods include different types of techniques to identify, validate and reassemble the file. This paper presents a comprehensive study of data recovery, file carving, and file reassembling. It focuses on identifying and recovering JPEG Images as it is a wildly covered in the literature. It classifies the carving techniques into three types: signature-, structure-, and content-based carvers. Subsequently, the paper reviews seven advanced carving methods in the literature. Finally, the paper presents a number of research gaps and conclude a number of possible improvements. Generally, both the gaps and possible improvements are associated with the fragmentation problem of data files.

Item Type:	Article
Uncontrolled Keywords:	Digital Forensics; Data Recovery; File Carving; File Reassembling; JPEG Image
Subjects:	T Technology > TR Photography > TR287-500 Photographic processing. Darkroom technique
Divisions:	Faculty of Computer Science and Information Technology > Department of Information Security
Depositing User:	UiTM Student Praktikal
Date Deposited:	02 Dec 2021 07:09
Last Modified:	02 Dec 2021 07:09
URI:	http://eprints.uthm.edu.my/id/eprint/4402

Actions (login required)

View Item