Powered by OpenAIRE graph
Found an issue? Give us feedback
addClaim

Targeted Feature Engineering for Image File Fragment Classification

Authors: Alireza Chalechale; Mehdi Teimouri;

Targeted Feature Engineering for Image File Fragment Classification

Abstract

Accurate classification of file fragments is a critical challenge in digital forensics, particularly when formats exhibit similar structural or statistical properties. Recent deep learning approaches achieve high within-dataset accuracy but suffer from poor generalization, with performance degrading significantly on external datasets from different distributions. To address this, we develop format-specific discriminative features targeting frequently misclassified pairs identified via baseline models. Three datasets—ITC-MNP (training), ITC-Image, and FiFTy—are analyzed across five image formats: BMP, GIF, JPEG, PNG, and TIFF. Baselines using Random Forest (RF), XGBoost, and 1D convolutional neural network (1D-CNN) reveal confusion hotspots, particularly BMP vs. TIFF and BMP vs. JPEG. Specialized features, including Mean Absolute Byte Difference (MABD) capturing pixel smoothness, yield substantial gains of up to 12 percentage points (pp) on ITC-Image and 4 pp on FiFTy in our experimental setup. These results demonstrate targeted feature engineering as an effective, practical strategy to enhance model robustness in file fragment classification, opening avenues for forensics applications.

Related Organizations
  • BIP!
    Impact byBIP!
    selected citations
    These citations are derived from selected sources.
    This is an alternative to the "Influence" indicator, which also reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically).
    0
    popularity
    This indicator reflects the "current" impact/attention (the "hype") of an article in the research community at large, based on the underlying citation network.
    Average
    influence
    This indicator reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically).
    Average
    impulse
    This indicator reflects the initial momentum of an article directly after its publication, based on the underlying citation network.
    Average
Powered by OpenAIRE graph
Found an issue? Give us feedback
selected citations
These citations are derived from selected sources.
This is an alternative to the "Influence" indicator, which also reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically).
BIP!Citations provided by BIP!
popularity
This indicator reflects the "current" impact/attention (the "hype") of an article in the research community at large, based on the underlying citation network.
BIP!Popularity provided by BIP!
influence
This indicator reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically).
BIP!Influence provided by BIP!
impulse
This indicator reflects the initial momentum of an article directly after its publication, based on the underlying citation network.
BIP!Impulse provided by BIP!
0
Average
Average
Average
Upload OA version
Are you the author of this publication? Upload your Open Access version to Zenodo!
It’s fast and easy, just two clicks!