Learn more about this course.

Digital media forensics

What are some of the ways that digital media forensics can be used? In this article, Dr Ming Yan discusses his recent research.

Digital media forensics is a scientific methodology used to investigate and analyze digital media content (e.g., images, video and audio) in order to determine whether such content has been tampered with or falsified, as well as to identify the means and sources of tampering. This technique is particularly important in areas such as law, security and news verification, as it helps to reveal the authenticity and integrity of information.

The basic process of digital media forensics

Collection: Obtaining digital evidence, which may involve taking possession of physical assets such as computers, telephones, or hard drives and ensuring that no data is damaged or lost. At this stage, the storage media may be copied or imaged to maintain the original in its original state.
Examination: Various methods are used to identify and extract data. This stage can be divided into preparation, extraction and identification. In this phase, a decision is made as to whether to deal with a “live” or “dead” field system, and identification means determining whether the individual data are relevant to the case at hand.
Analysis: Interpreting the data collected to reveal facts. This may include using methods such as file recovery, network analysis and malware investigation to reveal hidden digital evidence.
Reporting: Keeping a detailed record of findings for future reference and potentially presenting evidence in court.

With the development of technology, the field of digital media forensics is also facing new challenges, especially with the rapid development of deep learning technology, the sensory gap between fake and real media is getting smaller and smaller, which poses a great challenge to media forensics research and makes multimedia forensics an important research direction in the field of information security.