Jump to content

Optimistic decompression

From Wikipedia, the free encyclopedia

This is the current revision of this page, as edited by Kku (talk | contribs) at 14:20, 18 December 2017 (link digital forensics using Find link). The present address (URL) is a permanent link to this version.

(diff) ← Previous revision | Latest revision (diff) | Newer revision → (diff)

Optimistic decompression is a digital forensics technique in which each byte of an input buffer is examined for the possibility of compressed data. If data is found that might be compressed, a decompression algorithm is invoked to perform a trial decompression. If the decompressor does not produce an error, the decompressed data is processed. The decompressor is thus called optimistically---that is, with the hope that it might be successful.[1]

Optimistic decompression is used as a tool to validate JPEGs that are produced by file carving. The approach can also be used for fragment reassembly carving by attempting to combine different combinations of fragments, looking for a combination that produces neither decompression errors nor visual discontinuities.

References

[edit]
  1. ^ "Digital media triage with bulk data analysis and bulk extractor" (PDF). Cloud.github.com. Retrieved 2012-09-20.