期刊名称：International Journal of Computer Science & Technology
印刷版ISSN：2229-4333
电子版ISSN：0976-8491
出版年度：2017
卷号：8
期号：3
页码：50-53
语种：English
出版社：Ayushmaan Technologies
摘要：The interaction with technology continues to grow in our day today life, so does the amount of data created through this interaction. The role of a digital forensics analyst is to acquire the data and draw conclusions about the events or actions, either caused by accident or with criminal intent create, delete or manipulate data and discover the facts about who or what is responsible for the event. ‘‘Image carving’’ reconstructs images based on their content, rather than using metadata that points to the content. The knowledge of common file structure, information contained in files, and heuristics regarding how file systems fragment data are the factors used in this carving process. This paper aims at carving files from unallocated space, free clusters, lost clusters, slack area, formatted partition, deleted partition or even in cases where file system could be unknown, corrupt or even missing. This paper also aims to carve the files in which the data are contiguouslyallocated or fragmented.
关键词：Fragmentation;Carving;Signature Based Approach;Candidate Weights
