TU Darmstadt / ULB / TUbiblio

Automation of Video File Carving and Content Identification

Yannikos, York ; Ashraf, Muhammad-Nadeen ; Steinebach, Martin ; Winter, Christian
eds.: Peterson, Gilbert ; Shenoi, Sujeet (2013)
Automation of Video File Carving and Content Identification.
USA, Florida, Orlando, National Center for Forensic Science
Conference or Workshop Item, Bibliographie

Abstract

The amount of data distributed within the Internet steadily increases -- so does the amount of illegal content, especially illegal image and video data. Therefore, the capability of automatically recovering and analyzing multimedia data from seized storage devices is crucial for forensic investigators. However, most forensic analysis processes are still done manually or require continuous interaction, e.g. applying content recovery and a subsequent content identification. Especially the identification of illegal content during an investigation is very time-consuming since no reliable tools for automatic content classification of found multimedia data exist for practical use. Additionally, current multimedia file carvers are often not robust enough, e.g. recovering single frames of video files where some data is corrupted or missing is often not possible. Hence, evidence data or exonerating content may be overlooked. Altogether, more robust tools and more automation is required for thorough forensic analyses.

In this work we summarize the state of the art in video file carving. Furthermore, we propose combining the two forensic techniques -- video file carving and robust hashing -- to a single procedure which can be used for the automated recovery and identification of video content. Applying this procedure allows forensic investigators an automated search and recovery of video content such as single video frames as well as an automated matching of findings against reference data sets, e.g. hash databases indexing illegal content. Thus our procedure helps speeding up forensic investigation processes significantly.

Item Type: Conference or Workshop Item
Erschienen: 2013
Editors: Peterson, Gilbert ; Shenoi, Sujeet
Creators: Yannikos, York ; Ashraf, Muhammad-Nadeen ; Steinebach, Martin ; Winter, Christian
Type of entry: Bibliographie
Title: Automation of Video File Carving and Content Identification
Language: English
Date: October 2013
Publisher: Springer
Book Title: Advances in Digital Forensics IX – 9th IFIP WG 11.9 International Conference on Digital Forensics, Orlando, Florida, USA, January 28–30, 2013, Revised Selected Papers
Series: IFIP Advances in Information and Communication Technology
Series Volume: 410
Event Location: USA, Florida, Orlando, National Center for Forensic Science
Abstract:

The amount of data distributed within the Internet steadily increases -- so does the amount of illegal content, especially illegal image and video data. Therefore, the capability of automatically recovering and analyzing multimedia data from seized storage devices is crucial for forensic investigators. However, most forensic analysis processes are still done manually or require continuous interaction, e.g. applying content recovery and a subsequent content identification. Especially the identification of illegal content during an investigation is very time-consuming since no reliable tools for automatic content classification of found multimedia data exist for practical use. Additionally, current multimedia file carvers are often not robust enough, e.g. recovering single frames of video files where some data is corrupted or missing is often not possible. Hence, evidence data or exonerating content may be overlooked. Altogether, more robust tools and more automation is required for thorough forensic analyses.

In this work we summarize the state of the art in video file carving. Furthermore, we propose combining the two forensic techniques -- video file carving and robust hashing -- to a single procedure which can be used for the automated recovery and identification of video content. Applying this procedure allows forensic investigators an automated search and recovery of video content such as single video frames as well as an automated matching of findings against reference data sets, e.g. hash databases indexing illegal content. Thus our procedure helps speeding up forensic investigation processes significantly.

Uncontrolled Keywords: Secure Data;Automated Forensic Procedures, Video File Carving, Robust Hashing
Identification Number: TUD-CS-2013-0243
Divisions: LOEWE
LOEWE > LOEWE-Zentren
LOEWE > LOEWE-Zentren > CASED – Center for Advanced Security Research Darmstadt
Date Deposited: 30 Dec 2016 20:23
Last Modified: 12 Jan 2019 21:21
PPN:
Export:
Suche nach Titel in: TUfind oder in Google
Send an inquiry Send an inquiry

Options (only for editors)
Show editorial Details Show editorial Details