Design of a Digital Forensics Evidence Reconstruction System for Complex and Obscure Fragmented File Carving

Thing, Vrizlynn L. L.; Chua, Tong-Wei; Cheong, Ming-Lee

doi:10.1109/cis.2011.180

Cited by 11 publications

(2 citation statements)

References 11 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…According to the detection results, we detected all eight tail-cut deleted video files (T1 to T4). For digital forensics investigators, the time consumption of an integrity verification scheme is one of the important criteria in terms of practicality [19][20][21]. The size of a target video file can be large, up to several gigabytes.…”

Section: Discussionmentioning

confidence: 99%

Broken Integrity Detection of Video Files in Video Event Data Recorders

2016

KSII TIIS

View full text Add to dashboard Cite

As digital evidence has a highly influential role in proving the innocence of suspects, methods for integrity verification of such digital evidence have become essential in the digital forensic field. Most surveillance camera systems are not equipped with proper built-in integrity protection functions. Because digital forgery techniques are becoming increasingly sophisticated, manually determining whether digital content has been falsified is becoming extremely difficult for investigators. Hence, systematic approaches to forensic integrity verification are essential for ascertaining truth or falsehood. We propose an integrity determination method that utilizes the structure of the video content in a Video Event Data Recorder (VEDR). The proposed method identifies the difference in frame index fields between a forged file and an original file. Experiments conducted using real VEDRs in the market and video files forged by a video editing tool demonstrate that the proposed integrity verification scheme can detect broken integrity in video content.

show abstract

Section: Discussionmentioning

confidence: 99%

Broken Integrity Detection of Video Files in Video Event Data Recorders

2016

KSII TIIS

View full text Add to dashboard Cite

show abstract

“…Secara garis besar, terdapat 2 metode yang digunakan untuk melakukan file recovery, yaitu dengan melakukan analisis terhadap file system dan analisis terhadap raw data. Salah satu metode file recovery dengan metode analisis terhadap raw data adalah metode carving [7], [10], [13], [14].…”

Section: Pendahuluanunclassified

Identifikasi dan Recovery File JPEG dengan Metode Signature-Based Carving dalam Model Automata

Ardiansyah¹,

Hardi²,

Gata³

2020

Komputika

View full text Add to dashboard Cite

Penggunaan format gambar JPEG semakin meningkat seiring dengan meningkatnya produksi foto digital yang dipicu oleh kemunculan smartphone dan perkembangan sosial media. Hal tersebut membuat file JPEG berperan penting dalam proses digital forensik, sehingga banyak metode identifikasi dan recovery file JPEG yang dikembangkan. Paper ini berusaha melihat proses data carving file JPEG dengan metode Signature-Based Carving, metode carving yang paling sederhana, dengan sebuah model diagram Finite State Automata, sebuah model algoritma dasar dalam teori komputasi.

show abstract