Francisco Rodríguez-Santos - ESIME Culhuacan, Instituto Politécnico Nacional, Coyoacán, D. F. 04430, México
Guillermo Delgado-Gutierréz - ESIME Culhuacan, Instituto Politécnico Nacional, Coyoacán, D. F. 04430, México
Leonardo Palacios-Luengas - ESIME Culhuacan, Instituto Politécnico Nacional, Coyoacán, D. F. 04430, México
Rubén Vazquéz-Medina - CMP+L, Instituto Politécnico Nacional, Ticoman, D.F. 07340, México

This work presents a forensics analysis methodologyimplemented to detect modifications in JPEG digital images byanalyzing the image’s metadata, thumbnail, camera traces andcompression signatures. Best practices related with digitalevidence and forensics analysis are considered to determine if thetechnical attributes and the qualities of an image are consistentwith each other. This methodology is defined according to therecommendations of the Good Practice Guide for Computer-Based Electronic Evidence defined by Association of ChiefPolice Officers of UK; the methodology certainty level is verifiedby an efficiency coefficient, calculated by the quotient of thenumber of correct resolutions and the total number of analyzedimages. This methodology can help to determine if a specificdigital image can be used as evidence, and thereby, help toclarify events or incidents with legal, civil, administrative orcriminal implications. Another advantage of the methodology isthat it can be applied with open source software tools

Forensic Science, Digital Evidence, ImageAuthenticity, Forensic Analysis Methodology, Digital ImageProcessing, Image Technical Attributes