Recovery of media files from flash memory
File carving is a vital, practical technique used for data recovery in digital forensics investigation and is exceptionally useful when filesystem metadata is unobtainable or damaged. JPEG is a highly popular picture file compression algorithm that is widely used worldwide. There are various file re...
Main Author: | |
---|---|
Other Authors: | |
Format: | Final Year Project (FYP) |
Language: | English |
Published: |
Nanyang Technological University
2022
|
Subjects: | |
Online Access: | https://hdl.handle.net/10356/157986 |
_version_ | 1824456736290897920 |
---|---|
author | Thong, Timothy Joseph Wai Hong |
author2 | Lap-Pui Chau |
author_facet | Lap-Pui Chau Thong, Timothy Joseph Wai Hong |
author_sort | Thong, Timothy Joseph Wai Hong |
collection | NTU |
description | File carving is a vital, practical technique used for data recovery in digital forensics investigation and is exceptionally useful when filesystem metadata is unobtainable or damaged. JPEG is a highly popular picture file compression algorithm that is widely used worldwide. There are various file recovery tools that enable us to recover corrupted JPEG files. More often than not, JPEG files are stored in fragments in different orders which makes file recovery much more difficult. To recover JPEG files, one is unable to look past the use of JPEG markers and the similarity of neighbouring pixels that help dictate if the data blocks belong to the same file or fragmentation point identification. In this paper, we propose another similarity technique (CVD) to assess if two sectors of identical JPEG file are correctly arranged consecutively with a new fragmentation point detection algorithm. |
first_indexed | 2025-02-19T03:58:50Z |
format | Final Year Project (FYP) |
id | ntu-10356/157986 |
institution | Nanyang Technological University |
language | English |
last_indexed | 2025-02-19T03:58:50Z |
publishDate | 2022 |
publisher | Nanyang Technological University |
record_format | dspace |
spelling | ntu-10356/1579862023-07-07T19:33:18Z Recovery of media files from flash memory Thong, Timothy Joseph Wai Hong Lap-Pui Chau School of Electrical and Electronic Engineering elpchau@ntu.edu.sg Engineering::Electrical and electronic engineering File carving is a vital, practical technique used for data recovery in digital forensics investigation and is exceptionally useful when filesystem metadata is unobtainable or damaged. JPEG is a highly popular picture file compression algorithm that is widely used worldwide. There are various file recovery tools that enable us to recover corrupted JPEG files. More often than not, JPEG files are stored in fragments in different orders which makes file recovery much more difficult. To recover JPEG files, one is unable to look past the use of JPEG markers and the similarity of neighbouring pixels that help dictate if the data blocks belong to the same file or fragmentation point identification. In this paper, we propose another similarity technique (CVD) to assess if two sectors of identical JPEG file are correctly arranged consecutively with a new fragmentation point detection algorithm. Bachelor of Engineering (Electrical and Electronic Engineering) 2022-05-26T12:16:39Z 2022-05-26T12:16:39Z 2022 Final Year Project (FYP) Thong, T. J. W. H. (2022). Recovery of media files from flash memory. Final Year Project (FYP), Nanyang Technological University, Singapore. https://hdl.handle.net/10356/157986 https://hdl.handle.net/10356/157986 en A3038-211 application/pdf Nanyang Technological University |
spellingShingle | Engineering::Electrical and electronic engineering Thong, Timothy Joseph Wai Hong Recovery of media files from flash memory |
title | Recovery of media files from flash memory |
title_full | Recovery of media files from flash memory |
title_fullStr | Recovery of media files from flash memory |
title_full_unstemmed | Recovery of media files from flash memory |
title_short | Recovery of media files from flash memory |
title_sort | recovery of media files from flash memory |
topic | Engineering::Electrical and electronic engineering |
url | https://hdl.handle.net/10356/157986 |
work_keys_str_mv | AT thongtimothyjosephwaihong recoveryofmediafilesfromflashmemory |