Difference between pages "Template:Carving" and "Optimistic decompression"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
(Created page with "Category:CarvingCarving")
 
(Created page with "Optimistic decompression is a digital forensics technique in which each byte of an input buffer is examined for the possibility of compressed data. If data is found that ''mig...")
 
Line 1: Line 1:
[[Category:Carving]][[:Category:Carving|Carving]]
+
Optimistic decompression is a digital forensics technique in which each byte of an input buffer is examined for the possibility of compressed data. If data is found that ''might'' be compressed, a decompression algorithm is invoked to perform a ''trial decompression.'' If the decompressor does not produce an error, the decompressed data is processed. The decompressor is thus called ''optimistically''---that is, with the hope that it might be successful.
 +
 
 +
Optimistic decompression is used as a tool to validate JPEGs that are produced by [[file carving]]. The approach can also be used for fragment reassembly carving by attempting to combine different combinations of fragments, looking for a combination that produces neither decompression errors nor visual discontinuities. This is the approach used by the [[Adroit]] file carver.
 +
 
 +
==See Also==
 +
* http://cloud.github.com/downloads/simsong/bulk_extractor/bulk_extractor.pdf

Latest revision as of 21:52, 5 August 2012

Optimistic decompression is a digital forensics technique in which each byte of an input buffer is examined for the possibility of compressed data. If data is found that might be compressed, a decompression algorithm is invoked to perform a trial decompression. If the decompressor does not produce an error, the decompressed data is processed. The decompressor is thus called optimistically---that is, with the hope that it might be successful.

Optimistic decompression is used as a tool to validate JPEGs that are produced by file carving. The approach can also be used for fragment reassembly carving by attempting to combine different combinations of fragments, looking for a combination that produces neither decompression errors nor visual discontinuities. This is the approach used by the Adroit file carver.

See Also