Share Email Print

Journal of Electronic Imaging

Reassembling fragmented BMP files based on padding bytes
Author(s): Xianyan Wu; Qi Han; Xiamu Niu
Format Member Price Non-Member Price
PDF $20.00 $25.00
cover GOOD NEWS! Your organization subscribes to the SPIE Digital Library. You may be able to download this paper for free. Check Access

Paper Abstract

Reassembling fragmented image files plays a crucial role in seizing digital evidence from scattered digital image files. The existing algorithms are mainly graph based, which cast the reassembly problem as a K-vertex disjoint path problem in a directed complete graph, which is an NP-complete problem. Based on the padding bytes in BMP files, we present a method to exclude most impossible paths, which can improve the accuracy and decrease the time complexity of the existing graph-based methods. According to the alignment rule of BMP format, padding bytes must be appended to the end of each row to bring up the length of the row to a multiple of 4 bytes. Hence the fragment, being a vertex of the path which correctly reassembles a file, has a property; its byte values at padding positions must be the padding values. Only the fragments with such property can be candidate fragments for the vertex. On the test dataset which is constructed based on 330 image files, taking eight classical methods as examples, we show that the proposed method produces an accuracy improvement ranging from 32% to 55%, and reduces the run time to a scope from 1/6 to 1/237.

Paper Details

Date Published: 9 May 2016
PDF: 9 pages
J. Electron. Imag. 25(3) 033002 doi: 10.1117/1.JEI.25.3.033002
Published in: Journal of Electronic Imaging Volume 25, Issue 3
Show Author Affiliations
Xianyan Wu, Harbin Institute of Technology (China)
Qi Han, Harbin Institute of Technology (China)
Xiamu Niu, Harbin Institute of Technology (China)

© SPIE. Terms of Use
Back to Top