Recovery method for JPEG file fragments with missing headers
头部缺失的JPEG文件碎片恢复

Recovering the incomplete fragments of a JPEG file is a challenge in the digital forensics field, especially in the case of where JPEG header is lost or damaged. In this paper,we present a method to decode and display JPEG file fragments whose header has been lost or damaged and its data doesn't include any restart marker. First, the decoding parameters (Huffman tables, image width, quantization tables, sampling factor)are estimated based on the fragment content; second, corresponding adjustment algorithms for the display problems about mismatched positions and colors are proposed. Experiments show that the proposed method can correctly decode and display the JPEG file fragments without header and RST marker.