摘要:
针对JPEG文件特征,提出一种基于差异度的JPEG碎片重组方法JFDDM。利用图片相邻像素间的相似性,通过匹配MCU单元的差异度判断碎片是否属于同一文件。对标准图片集的实验结果表明,该方法对不同类型的JPEG图片表现出较好的适应性,碎片重组效果良好。
关键词:
差异度,
计算机取证,
JPEG碎片,
重组,
JFDDM算法
Abstract:
According to the feature of computer forensic, a method is proposed to reassemble JPEG fragment files and the reassemble progress is described. By analyzing JPEG file structure, an algorithm called JFDDM(JPEG Fragment Degree of Difference Matching) for reassembling JPEG fragmented files is proposed and discussed, by which the MCU’ degree of difference in the image and the similarity between adjacent pixels are exploited to decide whether current fragments fall within the same image. Experimental results show that this is an effective method for JPEG fragment reassembling.
Key words:
degree of difference,
computer forensic,
JPEG fragment,
reassembling,
JFDDM(JPEG Fragment Degree of Difference Matching) algorithm
中图分类号:
肖腾, 许榕生. 基于差异度的JPEG碎片重组方法[J]. 计算机工程, 2011, 37(10): 263-265.
XIAO Teng, HU Rong-Sheng. Reassembling Method for JPEG Fragment Based on Degree of Difference[J]. Computer Engineering, 2011, 37(10): 263-265.