Force Open: Lightweight black box file repair

Karl Wüst; Petar Tsankov; Saša Radomirović; Mohammad Torabi Dashti

doi:10.1016/j.diin.2017.01.009

Force Open: Lightweight black box file repair

Karl Wüst^*, Petar Tsankov, Saša Radomirović, Mohammad Torabi Dashti

^*Corresponding author for this work

Research output: Contribution to journal › Article › peer-review

1 Citation (Scopus)

16 Downloads (Pure)

Abstract

We present a novel approach for automatic repair of corrupted files that applies to any common file format and does not require knowledge of its structure. Our lightweight approach modifies the execution of a file viewer instead of the file data and makes use of instrumentation and execution hijacking, two techniques from software testing. It uses a file viewer as a black box and does not require access to its source code or any knowledge about its inner workings. We present our implementation of this approach and evaluate it on corrupted PNG, JPEG, and PDF files.

Original language	English
Pages (from-to)	S75-S82
Number of pages	8
Journal	Digital Investigation
Volume	20
Issue number	Supplement
Early online date	21 Mar 2017
DOIs	https://doi.org/10.1016/j.diin.2017.01.009
Publication status	Published - Mar 2017

Keywords

Black box testing
Execution hijacking
File repair
Program instrumentation

ASJC Scopus subject areas

Pathology and Forensic Medicine
Information Systems
Computer Science Applications
Medical Laboratory Technology
Law

Access to Document

10.1016/j.diin.2017.01.009Licence: CC BY-NC-ND

Download pdf
© 2017 The Author(s).
Final published version, 559 KBLicence: CC BY-NC-ND

Cite this

@article{00871d7f5d944c36b1c376aa06119ddd,

title = "Force Open: Lightweight black box file repair",

abstract = "We present a novel approach for automatic repair of corrupted files that applies to any common file format and does not require knowledge of its structure. Our lightweight approach modifies the execution of a file viewer instead of the file data and makes use of instrumentation and execution hijacking, two techniques from software testing. It uses a file viewer as a black box and does not require access to its source code or any knowledge about its inner workings. We present our implementation of this approach and evaluate it on corrupted PNG, JPEG, and PDF files.",

keywords = "Black box testing, Execution hijacking, File repair, Program instrumentation",

author = "Karl W{\"u}st and Petar Tsankov and Sa{\v s}a Radomirovi{\'c} and {Torabi Dashti}, Mohammad",

year = "2017",

month = mar,

doi = "10.1016/j.diin.2017.01.009",

language = "English",

volume = "20",

pages = "S75--S82",

journal = "Digital Investigation",

issn = "1742-2876",

publisher = "Elsevier",

number = "Supplement",

}

TY - JOUR

T1 - Force Open

T2 - Lightweight black box file repair

AU - Wüst, Karl

AU - Tsankov, Petar

AU - Radomirović, Saša

AU - Torabi Dashti, Mohammad

PY - 2017/3

Y1 - 2017/3

N2 - We present a novel approach for automatic repair of corrupted files that applies to any common file format and does not require knowledge of its structure. Our lightweight approach modifies the execution of a file viewer instead of the file data and makes use of instrumentation and execution hijacking, two techniques from software testing. It uses a file viewer as a black box and does not require access to its source code or any knowledge about its inner workings. We present our implementation of this approach and evaluate it on corrupted PNG, JPEG, and PDF files.

AB - We present a novel approach for automatic repair of corrupted files that applies to any common file format and does not require knowledge of its structure. Our lightweight approach modifies the execution of a file viewer instead of the file data and makes use of instrumentation and execution hijacking, two techniques from software testing. It uses a file viewer as a black box and does not require access to its source code or any knowledge about its inner workings. We present our implementation of this approach and evaluate it on corrupted PNG, JPEG, and PDF files.

KW - Black box testing

KW - Execution hijacking

KW - File repair

KW - Program instrumentation

UR - http://www.scopus.com/inward/record.url?scp=85015747668&partnerID=8YFLogxK

U2 - 10.1016/j.diin.2017.01.009

DO - 10.1016/j.diin.2017.01.009

M3 - Article

AN - SCOPUS:85015747668

SN - 1742-2876

VL - 20

SP - S75-S82

JO - Digital Investigation

JF - Digital Investigation

IS - Supplement

ER -

Force Open: Lightweight black box file repair

Abstract

Keywords

ASJC Scopus subject areas

Access to Document

Other files and links

Fingerprint

Cite this