公开(公告)号：US20150036747A1

公开(公告)日：2015-02-05

申请号：US14444374

申请日：2014-07-28

Applicant: ELECTRONICS AND TELECOMMUNICATIONS RESEARCH INSTITUTE

Inventor： Taewoo OH ,  Kibom KIM

IPC: H04N19/51 ,  H04N19/89

CPC classification number: H04N19/52 ,  H04N19/46 ,  H04N19/521 ,  H04N19/895

Abstract: An encoding apparatus and method for concealing an error in a video frame are provided. The encoding apparatus for concealing an error in a video frame includes a vector computation unit, a difference computation unit, and an information insertion unit. The vector computation unit computes a predicted motion vector (pMV) and a real motion vector (rMV) using a target macro block of a current frame and a motion-compensated block of a previous frame. The difference computation unit calculates a motion vector difference (MVD) using a difference between the pMV and the rMV. The information insertion unit inserts an information bit, including the MVD, into quantized discrete cosine transform (QDCT) coefficients of the video frame.

Abstract translation: 提供了一种用于隐藏视频帧中的错误的编码装置和方法。 用于隐藏视频帧中的错误的编码装置包括矢量计算单元，差分计算单元和信息插入单元。 矢量计算单元使用当前帧的目标宏块和前一帧的运动补偿块来计算预测运动矢量（pMV）和实际运动矢量（rMV）。 差分计算单元使用pMV和rMV之间的差计算运动矢量差（MVD）。 信息插入单元将包括MVD的信息位插入到视频帧的量化离散余弦变换（QDCT）系数中。

公开(公告)号：US20170139783A1

公开(公告)日：2017-05-18

申请号：US15224853

申请日：2016-08-01

Applicant: ELECTRONICS AND TELECOMMUNICATIONS RESEARCH INSTITUTE

Inventor： Hyunuk HWANG ,  Kibom KIM ,  Seungyong LEE ,  Seongtaek CHEE

IPC: G06F11/14 ,  G06F17/30

CPC classification number: G06F11/1469 ,  G06F11/1435 ,  G06F16/1727 ,  G06F2201/80

Abstract: A method and an apparatus for recovery of a file system using metadata and data clusters. The apparatus for recovery of a file system generates an MFT entry list in a disc or an evidence image, collects at least one data cluster candidate, and uses at least one MFT entry and at least one data cluster candidate within the MFT entry list to generate at least one MFT entry-data cluster pair candidate. The apparatus for recovery of a file system analyzes the at least one MFT entry-data cluster pair candidate to determine attribute values of a virtual partition and generate the virtual partition based on the attribute values.

公开(公告)号：US20170024164A1

公开(公告)日：2017-01-26

申请号：US14930729

申请日：2015-11-03

Applicant: ELECTRONICS AND TELECOMMUNICATIONS RESEARCH INSTITUTE

Inventor： Seungjei YANG ,  Jungho CHOI ,  Kibom KIM ,  Taejoo CHANG

IPC: G06F3/06 ,  G06F9/44

CPC classification number: G06F3/0652 ,  G06F3/0623 ,  G06F3/0679 ,  G06F9/4403 ,  G06F11/004 ,  G06F11/07 ,  G06F11/0703 ,  G06F11/0706 ,  G06F11/0727 ,  G06F11/0751 ,  G06F11/0778 ,  G06F11/0796

Abstract: Forensic data acquisition apparatus and method. The forensic data acquisition apparatus according to an embodiment includes a command analysis unit for activating a boot loader and a Universal Serial Bus (USB) module of a smart device and analyzing a format of a flash memory read command based on results of analysis of the boot loader, a partition information analysis unit for analyzing partition information of flash memory in compliance with the flash memory read command, and a data acquisition unit for generating a dump image by dumping data stored in the flash memory based on the flash memory read command and the partition information, and for acquiring forensic data based on the dump image.

Abstract translation: 取证数据采集装置及方法。 根据实施例的取证数据获取装置包括用于激活智能设备的引导加载程序和通用串行总线（USB）模块的命令分析单元，并且基于引导的分析结果来分析闪存读取命令的格式 加载器，用于根据闪速存储器读取命令分析闪速存储器的分区信息的分区信息分析单元，以及用于通过基于闪存读取命令转储存储在闪速存储器中的数据来生成转储映像的数据获取单元， 分区信息，以及基于转储映像获取取证数据。

公开(公告)号：US20160077918A1

公开(公告)日：2016-03-17

申请号：US14547248

申请日：2014-11-19

Applicant: ELECTRONICS AND TELECOMMUNICATIONS RESEARCH INSTITUTE

Inventor： Hyunuk HWANG ,  Kibom KIM ,  Seungyong LEE

IPC: G06F11/14 ,  G06F11/20

CPC classification number: G06F11/1435 ,  G06F11/1417 ,  G06F11/1451 ,  G06F11/1469 ,  G06F11/2058 ,  G06F11/2069 ,  G06F2201/84

Abstract: A method and apparatus for recovering a partition based on file system metadata, which calculate core information necessary for the recovery of a partition using only the MFT entry information of $MFT and recover a deleted partition when an MBR and a GPT that correspond to the partition configuration information of a disk and a BR and a BBR that store the configuration information of a volume are deleted or destroyed. The method includes determining an unallocated area in a disk or an evidence image, collecting MFT entries from the unallocated area, generating MFT partition candidate information by analyzing the MFT entries, and creating information enabling a layout of a partition to be reconfigured based on the MFT partition candidate information, and creating a tree structure using the created information and the MFT entries.

Abstract translation: 一种用于基于文件系统元数据恢复分区的方法和装置，该文件系统元数据使用仅MFT条目信息$ MFT来计算恢复分区所需的核心信息，并且当与分区对应的MBR和GPT时恢复已删除分区 存储卷的配置信息的磁盘和BR的配置信息和BBR被删除或销毁。 该方法包括确定磁盘或证据图像中的未分配区域，从未分配区域收集MFT条目，通过分析MFT条目来生成MFT分区候选信息，以及创建能够基于MFT重配置分区的布局的信息 分区候选信息，以及使用创建的信息和MFT条目创建树结构。