A review of digital forensics methods for JPEG file carving
Digital forensics is an important field of cybersecurity and digital crimes investigation. It entails applying file recovery methods to analyze data from storage media and extract hidden, deleted or overwritten files. The recovery process might have accompanied with cases of unallocated partitions o...
| Main Authors: | , , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
Little Lion Scientific
2018
|
| Subjects: | |
| Online Access: | http://eprints.uthm.edu.my/4402/ http://eprints.uthm.edu.my/4402/1/AJ%202018%20%28759%29%20A%20review%20of%20digital%20forensics%20methods%20for%20JPEG%20file%20carving.pdf |
| _version_ | 1848888278220013568 |
|---|---|
| author | ALI, RABEI RAAD MOHAMAD, KAMARUDDIN MALIK JAMEL, SAPIEE Ahmad Khalid, Shamsul Kamal |
| author_facet | ALI, RABEI RAAD MOHAMAD, KAMARUDDIN MALIK JAMEL, SAPIEE Ahmad Khalid, Shamsul Kamal |
| author_sort | ALI, RABEI RAAD |
| building | UTHM Institutional Repository |
| collection | Online Access |
| description | Digital forensics is an important field of cybersecurity and digital crimes investigation. It entails applying file recovery methods to analyze data from storage media and extract hidden, deleted or overwritten files. The recovery process might have accompanied with cases of unallocated partitions of blocks or clusters and the absence of file system metadata. These cases entail advance recovery methods that have carving abilities. The file carving methods include different types of techniques to identify, validate and reassemble the file. This paper presents a comprehensive study of data recovery, file carving, and file reassembling. It focuses on identifying and recovering JPEG Images as it is a wildly covered in the literature. It classifies the carving techniques into three types: signature-, structure-, and content-based carvers. Subsequently, the paper reviews seven advanced carving methods in the literature. Finally, the paper presents a number of research gaps and conclude a number of possible improvements. Generally, both the gaps and possible improvements are associated with the fragmentation problem of data files. |
| first_indexed | 2025-11-15T20:07:44Z |
| format | Article |
| id | uthm-4402 |
| institution | Universiti Tun Hussein Onn Malaysia |
| institution_category | Local University |
| language | English |
| last_indexed | 2025-11-15T20:07:44Z |
| publishDate | 2018 |
| publisher | Little Lion Scientific |
| recordtype | eprints |
| repository_type | Digital Repository |
| spelling | uthm-44022021-12-02T07:09:53Z http://eprints.uthm.edu.my/4402/ A review of digital forensics methods for JPEG file carving ALI, RABEI RAAD MOHAMAD, KAMARUDDIN MALIK JAMEL, SAPIEE Ahmad Khalid, Shamsul Kamal TR287-500 Photographic processing. Darkroom technique Digital forensics is an important field of cybersecurity and digital crimes investigation. It entails applying file recovery methods to analyze data from storage media and extract hidden, deleted or overwritten files. The recovery process might have accompanied with cases of unallocated partitions of blocks or clusters and the absence of file system metadata. These cases entail advance recovery methods that have carving abilities. The file carving methods include different types of techniques to identify, validate and reassemble the file. This paper presents a comprehensive study of data recovery, file carving, and file reassembling. It focuses on identifying and recovering JPEG Images as it is a wildly covered in the literature. It classifies the carving techniques into three types: signature-, structure-, and content-based carvers. Subsequently, the paper reviews seven advanced carving methods in the literature. Finally, the paper presents a number of research gaps and conclude a number of possible improvements. Generally, both the gaps and possible improvements are associated with the fragmentation problem of data files. Little Lion Scientific 2018 Article PeerReviewed text en http://eprints.uthm.edu.my/4402/1/AJ%202018%20%28759%29%20A%20review%20of%20digital%20forensics%20methods%20for%20JPEG%20file%20carving.pdf ALI, RABEI RAAD and MOHAMAD, KAMARUDDIN MALIK and JAMEL, SAPIEE and Ahmad Khalid, Shamsul Kamal (2018) A review of digital forensics methods for JPEG file carving. Journal of Theoretical and Applied Information Technology, 96 (17). pp. 5841-5856. ISSN 1992-8645 |
| spellingShingle | TR287-500 Photographic processing. Darkroom technique ALI, RABEI RAAD MOHAMAD, KAMARUDDIN MALIK JAMEL, SAPIEE Ahmad Khalid, Shamsul Kamal A review of digital forensics methods for JPEG file carving |
| title | A review of digital forensics methods for JPEG file carving |
| title_full | A review of digital forensics methods for JPEG file carving |
| title_fullStr | A review of digital forensics methods for JPEG file carving |
| title_full_unstemmed | A review of digital forensics methods for JPEG file carving |
| title_short | A review of digital forensics methods for JPEG file carving |
| title_sort | review of digital forensics methods for jpeg file carving |
| topic | TR287-500 Photographic processing. Darkroom technique |
| url | http://eprints.uthm.edu.my/4402/ http://eprints.uthm.edu.my/4402/1/AJ%202018%20%28759%29%20A%20review%20of%20digital%20forensics%20methods%20for%20JPEG%20file%20carving.pdf |