Abstract
Many techniques have been proposed for file recovery, but recovering fragmented files is still a challenge in digital forensics, especially when the files are damaged. This chapter focuses on JPEG files, one of the most popular photograph formats, and proposes techniques for recovering partially-damaged standalone JPEG fragments by reconstructing pseudo headers. The techniques deal with missing Huffman tables and sub-sampling factors, estimate the resolution of fragments, assess the image quality of JPEG files with incorrect quantization tables, and create quantization tables that are very close to the correct quantization tables in a reasonable amount of time. Experiments with real camera pictures demonstrate that the techniques can recover standalone fragments accurately and efficiently.
Chapter PDF
Similar content being viewed by others
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2015 IFIP International Federation for Information Processing
About this paper
Cite this paper
Tang, Y. et al. (2015). FRAGMENTED JPEG FILE RECOVERY USING PSEUDO HEADERS. In: Peterson, G., Shenoi, S. (eds) Advances in Digital Forensics XI. DigitalForensics 2015. IFIP Advances in Information and Communication Technology, vol 462. Springer, Cham. https://doi.org/10.1007/978-3-319-24123-4_13
Download citation
DOI: https://doi.org/10.1007/978-3-319-24123-4_13
Published:
Publisher Name: Springer, Cham
Print ISBN: 978-3-319-24122-7
Online ISBN: 978-3-319-24123-4
eBook Packages: Computer ScienceComputer Science (R0)