Year of Graduation
Analysis of the Possibility of Fragmentation Point Detection in Raster Images without Compression
File carving is a crucial process in digital forensic where files during a reassembling are extracted from a digital device without any cooperation with file tables or metadata. The main challenge of this process is a recovery of the fragmented files. To accelerate file carving and increase productivity, it is necessary to take into account a fragmentation point, which can be effectively detected by the Sequential Hypothesis Test. The inadequacy of existing carving algorithms concerns only JPEG files although the BMP file format is similarly significant for computer crimes investigation. This work provides an exhaustive review of the literature on this topic, examines the file carving methods and existing software packages for data recovery, as well as the possibility of detecting the fragmentation point in raster graphics files without compression. During the research, 54 sources were studied.