{"id":{"repo_id":"uthm","oai_identifier":"oai:eprints.uthm.edu.my:1218"},"canonical_url":"https://search.dev.ndltd.org/etd/uthm/oai:eprints.uthm.edu.my:1218","repository":{"repo_id":"uthm","name":"Universiti Tun Hussein Onn Malaysia","base_url":"http://eprints.uthm.edu.my/cgi/oai2"},"display":{"title":"An improved file carver of intertwined jpeg images using X_myKarve","abstract":"File carving is a common technique for retrieving evidence data from computers that have been used for crime activities to assist crimes investigations especially in solving pornography cases where traditional data recovery fail. However, carving fragmented JPEG files are not easy to solve due to the complexity of determining the fragmentation point. In this research, X_myKarve’s framework is introduced to address the fragmentation issues that occur in JPEG images. The framework consists of six steps namely, dataset acquisition and preparation, pre-processing, work instruction generation, image carving and reconstitution, image completeness validation and fragmentation handling. X_myKarve is extended using myKarve’s framework by introducing a new technique, deletion by binary search to detect fragmentation point which is used to separate a file into several individual fragments. These fragments are then reassembled with the correct pairs which form a complete and correct image. X_myKarve is tested using various datasets namely DFRWS 2006, DFRWS 2007 and additional datasets which are prepared and designed to simulate a particular fragmentation problems addressed in this research. The result shows that X_myKarve is capable of carving 23.8% more than myKarve and 45.4% more than RevIt for DFRWS 2006 datasets where X_myKarve can carve intertwined fragmented JPEG images completely compared to myKarve and RevIt. X_myKarve is a good alternative for carving more fragmented JPEG files that are intertwined with each other.","abstract_html":"File carving is a common technique for retrieving evidence data from computers that have been used for crime activities to assist crimes investigations especially in solving pornography cases where traditional data recovery fail. However, carving fragmented JPEG files are not easy to solve due to the complexity of determining the fragmentation point. In this research, X_myKarve’s framework is introduced to address the fragmentation issues that occur in JPEG images. The framework consists of six steps namely, dataset acquisition and preparation, pre-processing, work instruction generation, image carving and reconstitution, image completeness validation and fragmentation handling. X_myKarve is extended using myKarve’s framework by introducing a new technique, deletion by binary search to detect fragmentation point which is used to separate a file into several individual fragments. These fragments are then reassembled with the correct pairs which form a complete and correct image. X_myKarve is tested using various datasets namely DFRWS 2006, DFRWS 2007 and additional datasets which are prepared and designed to simulate a particular fragmentation problems addressed in this research. The result shows that X_myKarve is capable of carving 23.8% more than myKarve and 45.4% more than RevIt for DFRWS 2006 datasets where X_myKarve can carve intertwined fragmented JPEG images completely compared to myKarve and RevIt. X_myKarve is a good alternative for carving more fragmented JPEG files that are intertwined with each other.","abstract_has_math":false,"creators":["Abdullah, Nurul Azma"],"institution":"Universiti Tun Hussein Onn Malaysia","degree_name":"phd","degree_level":"doctoral","degree_discipline":null,"degree_department":null,"school":null,"contributors":[],"advisors":[],"committee_chairs":[],"committee_members":[],"year":2014,"date_issued":"2014-06","date_published":"2014-06","updated_at":"2026-07-24T05:48:22Z","subjects":["QA76 Computer software"],"languages":["en"],"rights":[],"rights_urls":[],"identifier_entries":[]},"links":{"outbound_url":null,"outbound_label":null,"outbound_source":null},"metadata_groups":[{"id":"people","label":"People","entries":[{"key":"dc:creator","label":"Author","values":["Abdullah, Nurul Azma"]}]},{"id":"academic_context","label":"Academic Context","entries":[{"key":"dc:date","label":"Dc Date","values":["2014-06"]},{"key":"dc:date.issued","label":"Date","values":["2014-06"]},{"key":"dc:publisher.department","label":"Dc Publisher Department","values":["Fakulti Sains Komputer dan Teknologi Maklumat"]},{"key":"dc:publisher.institution","label":"Dc Publisher Institution","values":["Universiti Tun Hussein Onn Malaysia"]},{"key":"dc:relation.isreferencedby","label":"Dc Relation Isreferencedby","values":["http://eprints.uthm.edu.my/1218/"]},{"key":"dc:type","label":"Dc Type","values":["Thesis"]},{"key":"dc:type.qualificationlevel","label":"Dc Type Qualificationlevel","values":["doctoral"]},{"key":"dc:type.qualificationname","label":"Dc Type Qualificationname","values":["phd"]}]},{"id":"subjects_keywords","label":"Subjects and Keywords","entries":[{"key":"dc:subject","label":"Dc Subject","values":["QA76 Computer software"]}]},{"id":"language_rights","label":"Language and Rights","entries":[{"key":"dc:language","label":"Dc Language","values":["en"]}]},{"id":"identifiers","label":"Identifiers","entries":[{"key":"dc:identifier.uri","label":"Identifier URI","values":["http://eprints.uthm.edu.my/1218/1/24p%20NURUL%20AZMA%20ABDULLAH.pdf","http://eprints.uthm.edu.my/1218/2/NURUL%20AZMA%20ABDULLAH%20COPYRIGHT%20DECLARATION.pdf","http://eprints.uthm.edu.my/1218/3/NURUL%20AZMA%20ABDULLAH%20WATERMARK.pdf"]}]},{"id":"additional","label":"Additional Metadata","entries":[{"key":"dc:description.abstract","label":"Abstract","values":["File carving is a common technique for retrieving evidence data from computers that have been used for crime activities to assist crimes investigations especially in solving pornography cases where traditional data recovery fail. However, carving fragmented JPEG files are not easy to solve due to the complexity of determining the fragmentation point. In this research, X_myKarve’s framework is introduced to address the fragmentation issues that occur in JPEG images. The framework consists of six steps namely, dataset acquisition and preparation, pre-processing, work instruction generation, image carving and reconstitution, image completeness validation and fragmentation handling. X_myKarve is extended using myKarve’s framework by introducing a new technique, deletion by binary search to detect fragmentation point which is used to separate a file into several individual fragments. These fragments are then reassembled with the correct pairs which form a complete and correct image. X_myKarve is tested using various datasets namely DFRWS 2006, DFRWS 2007 and additional datasets which are prepared and designed to simulate a particular fragmentation problems addressed in this research. The result shows that X_myKarve is capable of carving 23.8% more than myKarve and 45.4% more than RevIt for DFRWS 2006 datasets where X_myKarve can carve intertwined fragmented JPEG images completely compared to myKarve and RevIt. X_myKarve is a good alternative for carving more fragmented JPEG files that are intertwined with each other."]},{"key":"dc:format","label":"Dc Format","values":["text"]},{"key":"dc:title","label":"Title","values":["An improved file carver of intertwined jpeg images using X_myKarve"]}]}],"canonical_facts":{"dc:creator":["Abdullah, Nurul Azma"],"dc:date":["2014-06"],"dc:date.issued":["2014-06"],"dc:description.abstract":["File carving is a common technique for retrieving evidence data from computers that have been used for crime activities to assist crimes investigations especially in solving pornography cases where traditional data recovery fail. However, carving fragmented JPEG files are not easy to solve due to the complexity of determining the fragmentation point. In this research, X_myKarve’s framework is introduced to address the fragmentation issues that occur in JPEG images. The framework consists of six steps namely, dataset acquisition and preparation, pre-processing, work instruction generation, image carving and reconstitution, image completeness validation and fragmentation handling. X_myKarve is extended using myKarve’s framework by introducing a new technique, deletion by binary search to detect fragmentation point which is used to separate a file into several individual fragments. These fragments are then reassembled with the correct pairs which form a complete and correct image. X_myKarve is tested using various datasets namely DFRWS 2006, DFRWS 2007 and additional datasets which are prepared and designed to simulate a particular fragmentation problems addressed in this research. The result shows that X_myKarve is capable of carving 23.8% more than myKarve and 45.4% more than RevIt for DFRWS 2006 datasets where X_myKarve can carve intertwined fragmented JPEG images completely compared to myKarve and RevIt. X_myKarve is a good alternative for carving more fragmented JPEG files that are intertwined with each other."],"dc:format":["text"],"dc:identifier.uri":["http://eprints.uthm.edu.my/1218/1/24p%20NURUL%20AZMA%20ABDULLAH.pdf","http://eprints.uthm.edu.my/1218/2/NURUL%20AZMA%20ABDULLAH%20COPYRIGHT%20DECLARATION.pdf","http://eprints.uthm.edu.my/1218/3/NURUL%20AZMA%20ABDULLAH%20WATERMARK.pdf"],"dc:language":["en"],"dc:publisher.department":["Fakulti Sains Komputer dan Teknologi Maklumat"],"dc:publisher.institution":["Universiti Tun Hussein Onn Malaysia"],"dc:relation.isreferencedby":["http://eprints.uthm.edu.my/1218/"],"dc:subject":["QA76 Computer software"],"dc:title":["An improved file carver of intertwined jpeg images using X_myKarve"],"dc:type":["Thesis"],"dc:type.qualificationlevel":["doctoral"],"dc:type.qualificationname":["phd"]},"updated_at":"2026-07-24T05:48:22Z"}