Research on the Possibility of Assembling JPG/JPEG Files from Fragments During Recovery

In the era of modern technology, many companies and users store their data digitally. Thus, attackers target information through attacks that target computer file systems on hard disks, and it is not uncommon for file fragments of various data types, including JPEG multimedia files, to be corrupted or deleted. Since the file systems themselves are also prone to integrity violations, traditional methods of recovering fragmented data fail. In such cases, it is required to use new recovery techniques that depend only on the stored file fragments, but not on their order of recording in the hard disk memory. This thesis is devoted to studying and searching for possibilities of JPEG/JPG files recovery using an unconventional method – file carving. The file recovery techniques described in the paper can be applied in forensic science. The research results were analyzed according to the following parameters and metrics of the techniques used: their applicability, efficiency, and support for working with JPEG format files. The proposed solution includes the research of the techniques, the software implementation of the selected techniques and an evaluation of how this program works. Future research directions and the possibility of optimizing the program will also be considered.