作者投稿和查稿 主编审稿 专家审稿 编委审稿 远程编辑

计算机工程 ›› 2011, Vol. 37 ›› Issue (10): 263-265. doi: 10.3969/j.issn.1000-3428.2011.10.091

• 开发研究与设计技术 • 上一篇    下一篇

基于差异度的JPEG碎片重组方法

肖 腾 1,许榕生 2   

  1. (1. 福州大学数学与计算机学院,福州 350000; 2. 中国科学院高能物理研究所计算中心,北京 100049)
  • 出版日期:2011-05-20 发布日期:2011-05-20
  • 作者简介:肖 腾(1985-),男,硕士研究生,主研方向:计算机取证,网络安全;许榕生,研究员、博士生导师
  • 基金资助:

    中国科学院知识创新工程基金资助项目(YYYJ-1013)

Reassembling Method for JPEG Fragment Based on Degree of Difference

XIAO Teng 1, XU Rong-sheng 2   

  1. (1. College of Mathematics and Computer, Fuzhou University, Fuzhou 350000, China; 2. Computing Center, Institute of High Energy Physics, Chinese Academy of Sciences, Beijing 100049, China)
  • Online:2011-05-20 Published:2011-05-20

摘要:

针对JPEG文件特征,提出一种基于差异度的JPEG碎片重组方法JFDDM。利用图片相邻像素间的相似性,通过匹配MCU单元的差异度判断碎片是否属于同一文件。对标准图片集的实验结果表明,该方法对不同类型的JPEG图片表现出较好的适应性,碎片重组效果良好。

关键词: 差异度, 计算机取证, JPEG碎片, 重组, JFDDM算法

Abstract:

According to the feature of computer forensic, a method is proposed to reassemble JPEG fragment files and the reassemble progress is described. By analyzing JPEG file structure, an algorithm called JFDDM(JPEG Fragment Degree of Difference Matching) for reassembling JPEG fragmented files is proposed and discussed, by which the MCU’ degree of difference in the image and the similarity between adjacent pixels are exploited to decide whether current fragments fall within the same image. Experimental results show that this is an effective method for JPEG fragment reassembling.

Key words: degree of difference, computer forensic, JPEG fragment, reassembling, JFDDM(JPEG Fragment Degree of Difference Matching) algorithm

中图分类号: