首页|Novel Similarity Measurements for Reassembling Fragmented Image Files

Novel Similarity Measurements for Reassembling Fragmented Image Files

扫码查看
Reassembling fragmented image files is a useful technique to seize image evidence in digital forensics. A key problem of reassembly is how to measure the similarity between the fragments. Most of the measurements are based on the local similarity of the images. We analyze the impact of similarity patterns on the judgment of the adjacency of the fragments and conclude that the horizontal similarity has little help. According to this conclusion, we improve the median edge detector by replacing the horizontal similarity with the left and right diagonal similarity. Furthermore, we improve the sum of differences and Euclidean distance by replacing the mean/sum used in the two measurements with the median. Experimental results verify the analysis of similarity patterns and the improvements.

Digital forensicsFile carvingFragment-ed image file reassemblySimilarity measurementMedian

WU Xianyan、HAN Qi、NIU Xiamu、ZHANG Hongli

展开 >

School of Computer Science and Technology, Harbin Institute of Technology, Harbin 150080, China

This work is supported by the National Natural Science Foundation of ChinaThis work is supported by the National Natural Science Foundation of ChinaThis work is supported by the National Natural Science Foundation of ChinaThis work is supported by the National Natural Science Foundation of ChinaFundamental Research Funds for the Central UniversitiesFundamental Research Funds for the Central Universities

61471141No.61301099No.61361166006HKNo.N_HKU 729/13HIT.KISTP.201416No.HIT.KISTP.201414

2019

中国电子杂志(英文版)

中国电子杂志(英文版)

CSTPCDCSCDSCIEI
ISSN:1022-4653
年,卷(期):2019.28(2)
  • 26