Recovery of media files from flash memory

File carving is a vital, practical technique used for data recovery in digital forensics investigation and is exceptionally useful when filesystem metadata is unobtainable or damaged. JPEG is a highly popular picture file compression algorithm that is widely used worldwide. There are various file re...

Full description

Bibliographic Details
Main Author: Thong, Timothy Joseph Wai Hong
Other Authors: Lap-Pui Chau
Format: Final Year Project (FYP)
Language:English
Published: Nanyang Technological University 2022
Subjects:
Online Access:https://hdl.handle.net/10356/157986
_version_ 1824456736290897920
author Thong, Timothy Joseph Wai Hong
author2 Lap-Pui Chau
author_facet Lap-Pui Chau
Thong, Timothy Joseph Wai Hong
author_sort Thong, Timothy Joseph Wai Hong
collection NTU
description File carving is a vital, practical technique used for data recovery in digital forensics investigation and is exceptionally useful when filesystem metadata is unobtainable or damaged. JPEG is a highly popular picture file compression algorithm that is widely used worldwide. There are various file recovery tools that enable us to recover corrupted JPEG files. More often than not, JPEG files are stored in fragments in different orders which makes file recovery much more difficult. To recover JPEG files, one is unable to look past the use of JPEG markers and the similarity of neighbouring pixels that help dictate if the data blocks belong to the same file or fragmentation point identification. In this paper, we propose another similarity technique (CVD) to assess if two sectors of identical JPEG file are correctly arranged consecutively with a new fragmentation point detection algorithm.
first_indexed 2025-02-19T03:58:50Z
format Final Year Project (FYP)
id ntu-10356/157986
institution Nanyang Technological University
language English
last_indexed 2025-02-19T03:58:50Z
publishDate 2022
publisher Nanyang Technological University
record_format dspace
spelling ntu-10356/1579862023-07-07T19:33:18Z Recovery of media files from flash memory Thong, Timothy Joseph Wai Hong Lap-Pui Chau School of Electrical and Electronic Engineering elpchau@ntu.edu.sg Engineering::Electrical and electronic engineering File carving is a vital, practical technique used for data recovery in digital forensics investigation and is exceptionally useful when filesystem metadata is unobtainable or damaged. JPEG is a highly popular picture file compression algorithm that is widely used worldwide. There are various file recovery tools that enable us to recover corrupted JPEG files. More often than not, JPEG files are stored in fragments in different orders which makes file recovery much more difficult. To recover JPEG files, one is unable to look past the use of JPEG markers and the similarity of neighbouring pixels that help dictate if the data blocks belong to the same file or fragmentation point identification. In this paper, we propose another similarity technique (CVD) to assess if two sectors of identical JPEG file are correctly arranged consecutively with a new fragmentation point detection algorithm. Bachelor of Engineering (Electrical and Electronic Engineering) 2022-05-26T12:16:39Z 2022-05-26T12:16:39Z 2022 Final Year Project (FYP) Thong, T. J. W. H. (2022). Recovery of media files from flash memory. Final Year Project (FYP), Nanyang Technological University, Singapore. https://hdl.handle.net/10356/157986 https://hdl.handle.net/10356/157986 en A3038-211 application/pdf Nanyang Technological University
spellingShingle Engineering::Electrical and electronic engineering
Thong, Timothy Joseph Wai Hong
Recovery of media files from flash memory
title Recovery of media files from flash memory
title_full Recovery of media files from flash memory
title_fullStr Recovery of media files from flash memory
title_full_unstemmed Recovery of media files from flash memory
title_short Recovery of media files from flash memory
title_sort recovery of media files from flash memory
topic Engineering::Electrical and electronic engineering
url https://hdl.handle.net/10356/157986
work_keys_str_mv AT thongtimothyjosephwaihong recoveryofmediafilesfromflashmemory