1 / 28

EXIF Data and Imagery Forensics

EXIF Data and Imagery Forensics. Sarah Weeks, Auburn University. Overview. Why are images important? What is EXIF Data? What does EXIF data tell us? The reliability of EXIF Data Are images reliable?. Why are images Important?. http://www.vote29.com/ newmyblog /archives/20664.

donat
Download Presentation

EXIF Data and Imagery Forensics

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. EXIF Data and Imagery Forensics Sarah Weeks, Auburn University

  2. Overview • Why are images important? • What is EXIF Data? • What does EXIF data tell us? • The reliability of EXIF Data • Are images reliable?

  3. Why are images Important? http://www.vote29.com/newmyblog/archives/20664

  4. Why are images Important? /www.amazon.com/The-Reconfigured-Eye-Visual-Post-Photographic/dp/0262631601/archives/20664

  5. Why are images Important?

  6. Why are images Important? http://blogs.wsj.com/washwire/2008/07/10/afp-three-not-four-iranian-missiles/

  7. Why are images Important?

  8. Why are images Important?

  9. Why are images Important? http://www.facts-about.org.uk/science-moon-landing-conspiracy-hoax-theory.htm

  10. What is EXIF Data?

  11. What is EXIF Data? Aperture Value 2.8 Color Space sRGB Create Date 2010:01:11 18:05:47 5 hours, 8 minutes, 12 seconds ago Date/Time Original 2010:01:11 18:05:47 5 hours, 8 minutes, 12 seconds ago Exif Image Size 600 × 800 Exif Version 0221 Exposure Mode Auto Exposure Program Program AE Exposure Time 1/10 F Number 2.8 Flash No flash function Flashpix Version 0100 Focal Length 3.9 mm GPS Altitude 49 m GPS Altitude Ref Above Sea Level GPS Dilution Of Precision 5 GPS Img Direction 211.6141732 GPS Img Direction Ref True North GPS Latitude 38.897778 degrees GPS Latitude Ref North GPS Longitude 77.036639 degrees GPS Longitude Ref West GPS Time Stamp 18:05:47 ISO 1,016 Make Apple Metering Mode Spot Camera Model Name iPhone 3GS Modify Date 2010:01:11 18:05:47 5 hours, 8 minutes, 12 seconds ago Resolution 72 pixels/inch Sensing Method One-chip color area Sharpness Normal Shutter Speed Value 1/10 Software 3.1.2 White Balance Auto Y Cb Cr Positioning Centered JFIF

  12. Unwise Photo to Post

  13. EXIF data location

  14. What is EXIF Data?

  15. What is EXIF Data? • Have we thought about what all we can store in this? Is this like slack space? • EXIF data generally gives us information about a picture.

  16. ExifTool by Phil Harvey $ exiftool -a -u -g1 /Users/usercomputer/Desktop/photo.JPG ---- ExifTool ---- ExifTool Version Number : 8.85 ---- System --- File Name : photo.JPG Directory : /Users/cwperr/Desktop File Size : 1703 kB File Modification Date/Time : 2012:03:27 15:22:17-05:00 File Permissions : rw-r--r-- ---- File ---- File Type : JPEG MIME Type : image/jpeg Exif Byte Order : Big-endian (Motorola, MM) Image Width : 3264 Image Height : 2448 Encoding Process : Baseline DCT, Huffman coding Bits Per Sample : 8 Color Components : 3 Y Cb Cr Sub Sampling : YCbCr4:2:0 (2 2) ---- IFD0 ---- Make : Apple Camera Model Name : iPhone 4S Orientation : Horizontal (normal) X Resolution : 72 Y Resolution : 72 Resolution Unit : inches Software : 5.0.1 Modify Date : 2012:03:26 12:57:32 Y Cb Cr Positioning : Centered ---- ExifIFD ----

  17. Reading Commands

  18. Writing Commands

  19. Information Found in exif Data

  20. Clearing and Hiding Information

  21. Changing GPS information • Use a track.log file

  22. Original Location

  23. Adding a New GPS .log File

  24. Change that up a bit…

  25. Now the EXIF Data Indicates..

  26. Questions?

  27. Links to Tools • Geosetter • http://www.geosetter.de/en • Exiftool • http://www.sno.phy.queensu.ca/~phil/exiftool/ • FTK • http://accessdata.com/products/computer-forensics/ftk • GPS Photo Linker • http://www.earlyinnovations.com/gpsphotolinker/ • ExpertGPS • http://www.expertgps.com/default.asp

  28. References • http://www.errorlevelanalysis.com/ • http://www.hackerfactor.com/genderguesser.php#analyze • http://www.howtogeek.com/90484/image-forensics-tool-tells-you-if-an-image-was-photoshopped/ • http://blogs.mathworks.com/steve/2008/05/30/digital-image-forensics

More Related