| SANYO数码相机中被删除视频的恢复 |
| |
| 引用本文： | 黄步根,黄政,刘建军. SANYO数码相机中被删除视频的恢复[J]. 信息网络安全, 2011, 0(9): 143-144,155. DOI: 10.3969/j.issn.1671-1122.2011.09.045 |
| |
| 作者姓名： | 黄步根 黄政 刘建军 |
| |
| 作者单位： | 1. 江苏警官学院,江苏南京,210012
2. 南京市公安局网络安全保卫支队,江苏南京,210005 |
| |
| 摘 要： | MP4文件由一系列段组成，每个段的开头有1段长和段名，各占4字节，第1个段总是ftyp段，最重要的是mdat段，视频内容在此段，其数据关系在moov段，free段是空闲内容，用于填补数据簇。实验研究发现，SANYO数码相机拍摄MP4视频数据时的存储不连续，根据段分割为5个部分。根据MP4文件形成轨迹，结合MP4文件的结构可以恢复删除的视频文件。
|
| 关 键 词： | SANYO 视频 文件结构 文件存储 计算机取证 |
Recover the Deleted Video Data from SANYO Camera |
| |
| HUANG Bu-Gen,HUANG Zheng,LIU Jian-Jun. Recover the Deleted Video Data from SANYO Camera[J]. Netinfo Security, 2011, 0(9): 143-144,155. DOI: 10.3969/j.issn.1671-1122.2011.09.045 |
| |
| Authors: | HUANG Bu-Gen HUANG Zheng LIU Jian-Jun |
| |
| Affiliation: | 2 ( 1.Jiangsu Police Institute, Nanjing Jiangsu 210012, China; 2.Department of Network Security and Enforcement, Nanjing Municipal Public Security Bureau, Nanjing Jiangsu 210005, China ) |
| |
| Abstract: | An MPEG-4 file is made of a number of discrete units called segments. The begin for every segment is the name and the length. The fop segment is always first. The most important part of an MPEG-4 file is the mdat segment, in which consist of the video data. However, the hierarchies of the mdat segment are in the moov segment. The free segment is used to pad the data cluster. It is found by experiment that the file created by SANYO camera does not storage sequentially, but in 5 parts. Researching the trace created by SANYO camera and the data structure of MPEG-4 file, we can recovery the deleted video file. |
| |
| Keywords: | SANYO video data recover file format file storage |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
|
