Roadmap to Approaches for Carving of Fragmented Multimedia Files

Poisel, Rainer; Tjoa, Simon

doi:10.1109/ares.2011.118

Cited by 10 publications

(7 citation statements)

References 14 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Poisel et al [14,16] have proposed file carving approaches for carving fragmented multimedia files. The approaches involve preprocessing, collating and reassembly.…”

Section: Related Workmentioning

confidence: 99%

Semantic Video Carving Using Perceptual Hashing and Optical Flow

Fang¹,

Li²,

Xi³

et al. 2017

Advances in Digital Forensics XIII

View full text Add to dashboard Cite

Video files are frequently encountered in digital forensic investigations. However, these files are usually fragmented and are not stored consecutively on physical media. Suspects may logically delete the files and also erase filesystem information. Unlike image carving, limited research has focused on video carving. Current approaches depend on filesystem information or attempt to match every pair of fragments, which is impractical. This chapter proposes a two-stage approach to tackle the problem. The first perceptual grouping stage computes a hash value for each fragment; the Hamming distance between hashes is used to quickly group fragments from the same file. The second precise stitching stage uses optical flow to identify the correct order of fragments in each group. Experiments with the BOSS dataset reveal that the approach is very fast and does not sacrifice accuracy or overall precision.

show abstract

“…Poisel et al [14,16] have proposed file carving approaches for carving fragmented multimedia files. The approaches involve preprocessing, collating and reassembly.…”

Section: Related Workmentioning

confidence: 99%

Semantic Video Carving Using Perceptual Hashing and Optical Flow

Fang¹,

Li²,

Xi³

et al. 2017

Advances in Digital Forensics XIII

View full text Add to dashboard Cite

show abstract

“…2) Dataset 2: R. Poiseland and S. Tjoa use a script to simulate the actual image saved in the disk [1]. We use the script to generate our dataset, including JPEG, PNG, XML, HTML, SVG and TXT.…”

Section: A Datasetsmentioning

confidence: 99%

“…As the network bandwidth improves, multimedia files are used widely. Multimedia files can carry more information, which is necessary during digital investigations [1].…”

Section: Introductionmentioning

confidence: 99%

A New Approach to Multimedia Files Carving

Qiu

Zhu

Guo

et al. 2014

2014 IEEE International Conference on Bioinformatics and Bioengineering

View full text Add to dashboard Cite

Traditional file recovery methods rely on file system information, which are ineffective when file system information isn't available. File carving is a file recovery method that recovers files according to their structure and content without file system information, which is widely used in digital forensics. As the important carriers of digital information, multimedia files are important digital evidence. In this paper, a new multimedia file carving approach is proposed to improve the recovery accuracy of high entropy file fragments. The fragmented files can be recovered by a hierarchical carving process, including file header identification via entropy, file fragment type classification, and file reassembly via parallel unique path approach. A new file type classification method is constructed based on support vector machine, by using the features of BFD (byte frequency distribution) and ROC (rate of change). Four different datasets, such as DFRWS 2006/2007 challenge datasets, dataset simulating actual disk, dataset with randomly disordered fragments, and dataset with biomedical images, are employed in our experiments. The results show that JPEG recovery accuracy is improved greatly compared with that of PhotoRec tool. Our method performs best in the situation where the order of fragments is completely confusing.

show abstract

“…Nevertheless, video evidence is susceptible to tampering. With the advent of easy-to-use video editing tools, video files are increasingly at risk of being forged [5][6]. Consequently, it is entirely possible that a forged video could be submitted to a court as evidence [7].…”

Section: Introductionmentioning

confidence: 99%

Broken Integrity Detection of Video Files in Video Event Data Recorders

2016

KSII TIIS

View full text Add to dashboard Cite

As digital evidence has a highly influential role in proving the innocence of suspects, methods for integrity verification of such digital evidence have become essential in the digital forensic field. Most surveillance camera systems are not equipped with proper built-in integrity protection functions. Because digital forgery techniques are becoming increasingly sophisticated, manually determining whether digital content has been falsified is becoming extremely difficult for investigators. Hence, systematic approaches to forensic integrity verification are essential for ascertaining truth or falsehood. We propose an integrity determination method that utilizes the structure of the video content in a Video Event Data Recorder (VEDR). The proposed method identifies the difference in frame index fields between a forged file and an original file. Experiments conducted using real VEDRs in the market and video files forged by a video editing tool demonstrate that the proposed integrity verification scheme can detect broken integrity in video content.

show abstract

Roadmap to Approaches for Carving of Fragmented Multimedia Files

Cited by 10 publications

References 14 publications

Semantic Video Carving Using Perceptual Hashing and Optical Flow

Semantic Video Carving Using Perceptual Hashing and Optical Flow

A New Approach to Multimedia Files Carving

Broken Integrity Detection of Video Files in Video Event Data Recorders

Contact Info

Product

Resources

About