Digital Forensics CH10

When working with image files, computer investigators also need to be aware of ________ laws to guard against copyright violations.

Copyright

The process or converting raw picture data to another format is referred to as _________.

Demosaicing

Operating systems do not have tools for recovering image files.

False

Steganography cannot be used with file formats other than image files.

False

________ is the art of hiding information inside image files.

Steganography

_________ has also been used to protect copyrighted material by inserting digital watermarks into a file.

Steganography

________ steganography replaces bits of the host file with other bits of data.

Substitution

The file format XIF is derived from the more common ____ file format.

TIFF

If a graphics file is fragmented across areas on a disk, first you must recover all the fragments to re-create the file.

True

With many computer forensics tools, you can open files with external viewers.

True

The majority of digital cameras use the _______ format to store digital pictures.

EXIF

_______ steganography places data from the secret file into the host file without displaying the secret data when you view the host file in its associated program.

Insertion

A(n) ______ file has a hexadecimal header value of FF D8 FF E0 00 10.

JPEG

Under copyright laws, computer programs may be registered as _______.

Literary works

Bitmap images are collections of dots, or pixels, that form an image.

True

_________ are based on mathematical instructions that define lines, curves, text, ovals, and other geometric shapes.

Vector Graphics

_______ images store graphics information as grids of individual pixels.

Bitmap

Recovering pieces of a file is called _______.

Carving

You use _________ to create, modify, and save bitmap, vector, and metafile graphics files.

Graphic Editors

If you can't open an image file in an image viewer, the next step is to examine the file's _________.

Header Data

The simplest way to access a file header is to use a(n) ________ editor.

Hexadecimal

______ compression compresses data by permanently discarding bits of information in the file.

Lossy