File Carving for Ext4 File System on Android OS
نویسندگان
چکیده
منابع مشابه
In-Place File Carving
File carving is the process of recovering files from an investigative target, potentially without knowledge of the filesystem structure. Current generation file carvers make complete copies of recovered files. Unfortunately, they often produce a large number of false positives – “junk” files with invalid formats that frequently consume large amounts of disk space. This paper describes an “in-pl...
متن کاملHFS+: The Mac OS X File System
The Macintosh OS X operating system is built to interface with the HFS+ file system. Assuming that allocations and disk I/O can be detected by monitoring the internal clock and noting any significant slowdown, we attempted to discover block size, any effects of prefetching, the file cache size, and the number of direct pointers in the HFS+ inode. Our tests were met with unfortunate amounts of n...
متن کاملUsing parallel processing for file carving
File carving is one of the most important procedures in Digital Forensic Investigation (DFI). But it is also requires the most computational resources. Parallel processing on Graphics Processing Units have proven to be many times faster than when executed on standard CPU. This paper is inspecting the algorithms and methods to use parallel processing for development of file carving tools that wi...
متن کاملOptimal Path Construction for Fragmented File Carving
Fragmented File carving is an important technique in Digital Forensics to recover files from their fragments in the absence of the file system allocation information. In this paper, the fragmented file carving problem is formulated as a graph theoretic problem. Using this model, we describe two algorithms, “Optimal Carve” and “Probabilistic-based Carve”, to perform file reconstruction and recov...
متن کاملAdvanced File Carving Approaches for Multimedia Files
File carving is a recovery technique that recovers files based on information about their structure and content without matching file system information. As files can be recovered from their content and/or file structure this technique is indispensable during digital forensics investigations. So far many approaches for the recovery of digital images have been proposed. The main contribution of ...
متن کاملذخیره در منابع من
با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید
ژورنال
عنوان ژورنال: Journal of the Korea Institute of Information Security and Cryptology
سال: 2013
ISSN: 1598-3986
DOI: 10.13089/jkiisc.2013.23.3.417