SmartCarving™, introduced by Digital Assembly, is not only a new method but also a new way of thinking about data recovery. Files on disks and memory cards are broken into small blocks prior to storage. SmartCarving™ looks at a deleted file as a giant jigsaw puzzle where each block of the file is a piece of the puzzle. Recovering a deleted file is like solving a jigsaw puzzle with tens of thousands of pieces. Recovering all the deleted files from a disk or memory card is equivalent to solving multiple jigsaw puzzles with hundreds of millions of pieces simultaneously! Our research in this area continues to push the limits of file carving. Digital Assembly recently developed methods to successfully reassemble photos that are missing headers or missing pieces.
Collecting photo evidence is only the beginning of case work. Searching and filtering through thousands of photos to find the relevant ones for a case can be a daunting task, which is why Digital Assembly designed SmartFiltering™. SmartFiltering™ helps separate the wheat from the chaff. Through SmartFilters, use advanced signal processing and computer vision algorithms to filter photos based on image characteristics, contents, file information, EXIF data, and time stamps. SmartFiltering™ is designed to significantly reduce evidence processing times of busy investigators.
SmartCarving™ recovers most of the fragmented photos automatically. Whenever the SmartCarving algorithm takes a misstep, which could be a result of recovering heavily fragmented photos, GuidedCarving™ allows users to guide the algorithm back on track. By identifying the first point of fragmentation, GuidedCarving™ can help recover every photo from a disk—fragmented or not, all within a few mouse clicks.
We continue to develop the technologies necessary to improve digital forensics at the Information Systems and Internet Security (ISIS) laboratory at the Department of Computer and Information Science, Polytechnic Institute of NYU. For information on current (and past) research, see the selection of research papers below which present results published in leading technical conferences and peer-reviewed journals. For a list of upcoming conferences that professor Nasir Memon will be presenting at, please see the schedule below: