This paper presents a frame-based recovery technique of a corrupted video file using the specifications of a codec used to encode the video data. A video frame ...
,QWHUQDWLRQDO-RXUQDORI/DWHVW7UHQGVLQ(QJLQHHULQJDQG7HFKQRORJ\,-/7(7
'HVLJQRI9LGHR&RGHF0HWKRGRORJ\IRU &RUUXSWHG9LGHR)LOHVXVLQJ)UDPH%DVHG 5HFRYHU\ 'U.0DKDODNVKPL Professor, Information Technology, Karpagam College of Engineering, Coimbatore, Tamilnadu, India
'U*8VKD Associat Professor, Information Technology, Karpagam College of Engineering, Coimbatore, Tamilnadu, India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
.H\ZRUGV±([WUDFWLRQ)UDPHV5HVWRUDWLRQ5HFRYHU\YDOLGDWLRQ
,,1752'8&7,21 $VRIODWHDORWRIYLGHRVXEVWDQFHKDVEHHQGHOLYHUHGLQDFFRUGDQFHZLWKEURDGRIREVHUYDWLRQFDPHUDVDQGFHOO SKRQHVZLWKLQKHUHQWFDPHUDVDGYDQFHGYLGHRUHFRUGHUVDQGFDUVHFUHWHOHPHQWV5HFXSHUDWLRQRIUXLQHGRUKDUPHG YLGHRUHFRUGVKDVDVVXPHGDFULWLFDOSDUWLQFRPSXWHUL]HGFULPHVFHQHLQYHVWLJDWLRQ,QFULPLQDOH[DPLQDWLRQVYLGHR LQIRUPDWLRQUHFRUGHGRQFDSDFLW\PHGLDIUHTXHQWO\JLYHDQLPSHUDWLYHFRQILUPDWLRQRIDFDVH$VDSXVKWRVFDQIRU YLGHR LQIRUPDWLRQ UHFRUGHG DERXW FULPLQDO YLGHR LQIRUPDWLRQ UHFODPDWLRQ DQG YLGHR GRFXPHQW FXWWLQJ KDV EHHQ DFWLYHO\ FRQFHQWUDWHG 0RVW H[LVWLQJ YLGHR LQIRUPDWLRQ UHEXLOGLQJ SURFHGXUHV HQGHDYRU WR UHVWRUH WKH VRXUFH LQIRUPDWLRQXWLOL]LQJPHWDGDWDUHFRUGHGDVDSDUWRIWKHKHDGHURIDUHFRUGIUDPHZRUN 7KHPHWDGDWDRIILOHV\VWHPFRQWDLQVGRFXPHQWGDWDIRUH[DPSOHUHFRUGQDPHWLPHRIFKDQJHSK\VLFDODUHD MRLQ DQG VR IRUWK $W WKH SRLQW ZKHQ WKH DGPLQLVWUDWRU HUDVHV D UHFRUG WKH UHODWLQJ GRFXPHQW GDWD LQ WKH PHWD LQIRUPDWLRQRIILOHV\VWHPLVUHGHVLJQHGDVHUDVHGGHVSLWHWKH IDFWWKDWWKHYLGHRVXEVWDQFHSK\VLFDOO\VWD\VLQWKH PHGLXP'HVSLWHWKHIDFWWKDWDYLGHRVXEVWDQFHH[LVWVLQWKHPHGLDLWLVWU\LQJWRUHFRXSWKHYLGHRLQIRUPDWLRQLIWKH SHUWLQHQWPHWDGDWDLVHYDFXDWHGRUFKDQJHG5RXWLQHUHFRUGUHEXLOGLQJSURFHGXUHVGLVFRYHUWKHPHWDLQIRUPDWLRQRI WKH HUDVHG GRFXPHQWV WR KXQW GRZQ SK\VLFDO DUHDV FRQWDLQLQJ WKH JHQXLQH UHFRUG VXEVWDQFH ,Q DQ\ FDVH WKH GRFXPHQW FDQ W EH UHVWRUHG LI QRW DOO WKH UHFRUG FRQQHFWLRQV DUH MRLQHG 6LQFH D YLGHR UHFRUG UHJXODUO\ KDV DQ H[SDQVLYHYROXPHRIWKHLQIRUPDWLRQLWLVYHU\SURQHWREHGLYLGHGLQVSLWHRIWKHIDFWWKDWWKHPHWDGDWDVWD\VLQWKH GRFXPHQW KHDGHU $W WKH SRLQW ZKHQ SLHFH RI WKH UHFRUG ZDV RYHU ZULWWHQ UHVWRUDWLRQ RI D YLGHR GRFXPHQW ZLWK PHWDGDWD MXVW PD\ QRW EH IUXLWIXO PXFK RI WKH WLPH 7R KDQGOH WKHVH SUREOHPV YDULRXV SURFHGXUHV KDYH EHHQ SURSRVHG E\ ZKLFK LI WKH GRFXPHQW EHJLQ PDUNHUV DQG HQG PDUNHUV DUH IRXQG LQ OLJKW RI WKH UHFRUG VLJQDWXUH VLJQLILFDQWLQIRUPDWLRQDUHJDWKHUHGWRUHVWRUHWKHYLGHRLQIRUPDWLRQ 0DUN EDVHG UHFRUG UHEXLOGLQJ SURFHGXUHV VFDQ IRU WKH EHJLQ PDUNHU KHDGHU DQG WKH HQG PDUNHU IRRWHU WR ORFDWHDVXEVWDQWLDODVVRFLDWLRQRIWKHORFDOHVFRQWDLQLQJWKHKHDGHUDQGWKHIRRWHU7RH[SDQGWKHSUHFLVLRQRIWKH DVVRFLDWLRQRIWKHKHDGHUDQGWKHIRRWHUORFDOHVWKH\XWLOL]HGRWKHUGDWDIRUH[DPSOHPRVWH[WUHPH VL]HLQVHUWHG
9RO,VVXH-DQXDU\
,661;
,QWHUQDWLRQDO-RXUQDORI/DWHVW7UHQGVLQ(QJLQHHULQJDQG7HFKQRORJ\,-/7(7
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
)LJXUH&RQQHFWLRQRIWKH9HULILHG)UDPHZLWKRXWD6L]H,QGH[
1H[W ZH GLVFXVV WKH PHWKRGRORJLHV LQYROYHG WR UHVWRUH WKH PXOWLPHGLD ILOHV $ VLJQDWXUH EDVHG ILOH FDUYLQJ WHFKQLTXHLVXVHGWRUHVWRUHWKHFRUUXSWHGYLGHRILOHV B.
Signature Based File Carving Technique 7KHVLJQDWXUHEDVHGILOHFDUYLQJWHFKQLTXHVPHQWLRQHGDERYHFRQVLVWRIWKHIROORZLQJ)LJXUH,WFRQVLVWVRIYDULRXV SKDVHV x Identification Phase 7RUHFRJQL]HDYLGHRSDUWLQDFDSDFLW\PHGLXPDQGWRXQLWHLWWRWKHSDVWVHFWLRQ x Validation Phase 7RDFFHSWLIDOOMRLQHGYLGHRSDUWVHIIHFWLYHO\IUDPHDSOD\DEOHYLGHRUHFRUG x Validate by Human Expert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x Extraction Phase 7KH LQIRUPDWLRQ DUH UHPRYHG WDNLQJ LQWR DFFRXQW YLGHR RXWOLQH IURP WKH XQDOORFDWHG VSDFH DV UHPRYHG IURP WKH FDSDFLW\PHGLXPIRUUHEXLOGLQJ7KHEHJLQFRGHPDUNRIYLGHRFDVLQJLVKXQWGRZQZLWKRXWFRQVLGHULQJWKHUHFRUG IUDPHZRUNDQGWKHGRFXPHQWDUUDQJHPHQW7KHHGJHVDUHVHSDUDWHGLQOLJKWRIWKHEHJLQFRGHVLJQDWXUHWKHUHPRYHG HGJHLQIRUPDWLRQDUHFRQILUPHGWKURXJKWKHGHFRGHUZKDW VPRUHLWLVUHVROYHGLIWKHLQIRUPDWLRQDUHFDVLQJV x Connection Phase 7KH FRGHF DQG GRFXPHQW SDUWLFXODUV DUH XWLOL]HG WR LQWHUIDFH WKH HGJHV FKHFNHG LQ SDVW VWDJHV ,Q YLHZ RI WKH VHSDUDWHGHGJHVHWVWKHOHQJWKGDWDRIHYHU\FDVLQJUHFRUGHGLQWKHGRFXPHQWVLVXWLOL]HGWRDVVRFLDWHHGJHVHWVWKDW DUHUHVWRUHGLQWRDMRLQHGSLFWXUH
9RO,VVXH-DQXDU\
,661;
,QWHUQDWLRQDO-RXUQDORI/DWHVW7UHQGVLQ(QJLQHHULQJDQG7HFKQRORJ\,-/7(7
,GHQWLILFDWLRQ3KDVH
9DOLGDWLRQ3KDVH
9DOLGDWHE\+XPDQ([SHUW
([WUDFWLRQ3KDVH
&RQQHFWLRQ3KDVH
([WUDFWLRQRI9LGHR)UDPHV
&RQQHFWLRQRIWKH([WUDFWHG)UDPHV )LJXUH6LJQDWXUHEDVHGILOHFDUYLQJIORZFKDUW
)LJXUH:HLJKW&KDQJHDVDIXQFWLRQRIF\FOHQXPEHU@ 53RLVHODQG67MRD³)RUHQVLFVLQYHVWLJDWLRQVRI PXOWLPHGLDGDWD$UHYLHZRIWKHVWDWHRIWKHDUW´LQ3URFWK,QW&RQI,76HFXULW\ ,QFLGHQW0DQDJ,7)RUHQVLFVSS± >@ 0DKDODNVKPL. 3UDEKDNDU5µ3HUIRUPDQFH(YDOXDWLRQRI1RQ)XQFWLRQDO5HTXLUHPHQWV¶,Q*OREDO-RXUQDORI&RPSXWHU6FLHQFHDQG 7HFKQRORJ\6RIWZDUH 'DWD(QJLQHHULQJRQYROLVVXHYHUSS >@ 0DKDODNVKPL . 3UDEKDNDU5 %DODNULVKQDQ9 µ.HUQHO2SWLPL]DWLRQIRU,PSURYHG1RQ)XQFWLRQDO5HTXLUHPHQWV&ODVVLILFDWLRQ¶LQ -RXUQDORI7KHRUHWLFDO$QG$SSOLHG,QIRUPDWLRQ7HFKQRORJ\RQYROLVVXHSS± >@ 0DKDODNVKPL.3UDEKDNDU5 %DODNULVKQDQ9µ2SWLPL]LQJ6XSSRUW9HFWRU0DFKLQH)RU&ODVVLI\LQJ1RQ)XQFWLRQDO5HTXLUHPHQWV¶ LQ 0D[ZHOO 6FLHQWLILF 2UJDQL]DWLRQ µ5HVHDUFK -RXUQDO 2I $SSOLHG 6FLHQFHV (QJLQHHULQJ $QG 7HFKQRORJ\¶ 3ULQW ,661 2QOLQH,661RQYROLVVXHSS± >@ +76HQFDU DQG10HPRQ³2YHUYLHZRIVWDWHRIWKHDUWLQGLJLWDOLPDJHIRUHQVLFV´$OJRULWKPV $UFKLW,QI6\VW6HFXULW\ YROSS ± >@ / +XVWRQ 5 6XNWKDQNDU - &DPSEHOO DQG 3 3LOODL ³)RUHQVLF YLGHR UHFRQVWUXFWLRQ´ LQ 3URF $&0 QG ,QW :RUNVKRS 9LGHR 6XUYHLOO 6HQVRU1HWZSS± >@ $%/HZLV³5HFRQVWUXFWLQJFRPSUHVVHGSKRWRDQGYLGHRGDWD´&RPSXW/DE8QLY&DPEULGJH&DPEULGJH8.7HFK5HS >@ 5 3RLVHO DQG 6 7MRD³5RDGPDS WR DSSURDFKHV IRU FDUYLQJ RI IUDJPHQWHG PXOWLPHGLD ILOHV´ LQ 3URF WK ,QW &RQI $5(6 SS ± >@ /$URQVRQDQG-9DQ'HQ%RV³7RZDUGVDQHQJLQHHULQJDSSURDFKWRILOHFDUYHUFRQVWUXFWLRQ´LQ3URF,(((WK$QQX2036$&:SS ± >@ %&DUULHU)LOH6\VWHP)RUHQVLF$QDO\VLVYRO%RVWRQSS >@ &KHWDQ 7KDNUH3URI 0DQJHVK 7KDNDUH3URI 6 $ 'KDQGH(IILFLHQW 'HVLJQ RI )UDPH %DVHG 5HFRYHU\ 7HFKQLTXH IRU &RUUXSWHG 9LGHR )LOHV,QWHUQDWLRQDO-RXUQDORI,QQRYDWLYH5HVHDUFKLQ(OHFWULFDO(OHFWURQLFV,QVWUXPHQWDWLRQDQG&RQWURO(QJLQHHULQJ9RO,VVXH-XQH
9RO,VVXH-DQXDU\
,661;