文章基本信息

标题：Advanced File Carving Approaches for Multimedia Files
本地全文：下载
作者：Rainer Poisel ; Simon Tjoa ; Paul Tavolato 等
期刊名称：Journal of Wireless Mobile Networks, Ubiquitous Computing, and Dependable Applications
印刷版ISSN：2093-5374
电子版ISSN：2093-5382
出版年度：2011
卷号：2
期号：4
页码：42-58
出版社：Innovative Information Science & Technology Research Group
摘要：File carving is a recovery technique that recovers files based on information about their structure and content without matching file system information. As files can be recovered from their content and/or file structure this technique is indispensable during digital forensics investigations. So far many ap- proaches for the recovery of digital images have been proposed. The main contribution of this paper is a discussion of existing and new approaches for the recovery of multimedia files. After a short discussion of relevant multimedia file formats we present an overview of the current state-of-the-art in file carving. In the main part we focus on the implementation of a file carver for fragmented mul- timedia files. Finally, we summarize our findings and give an outlook with regard to post-processing files that have been recovered successfully
关键词：Forensics; multimedia; carving; recovery; fragmented