Design and Analysis of Inequalitybased Fragmented File Carving Algorithms

作     者：Vrizlynn L. L. Thing Ying Hwei-Ming 

作者机构：Institute for Infocomm Research Singapore 

出 版 物：《China Communications》 (中国通信（英文版）)

年 卷 期：2010年第7卷第6期

页      码：1-9页

摘      要：Fragmented File carving is an important technique in Digital Forensics to recover files from their fragments in the absence of file system allocation information. In this paper, the fragmented file carving problem is formulated as a graph theoretic problem. Using this model, we describe two algorithms, ＂Best Path Search＂ and ＂High Fragmentation Path Search＂, to perform file reconstruction and recovery. The best path search algorithm is a deterministic technique to recover the best file construction path. We show that this technique is more efficient and accurate than existing brute force techniques. In addition, a test was carried out to recover 10 files from their scattered fragments. The best path search algorithm was able to successfully recover all of them back to their original state. The high fragmentation path search technique involves a trade-off between the final score of the constructed path of the file and the file recovery time to allow a faster recovery process for highly fragmented files. Analysis shows that the accurate eliminations of paths have an accuracy of up to greater than 85%.

主 题 词：文件系统 算法分析 雕刻 最佳路径搜索 搜索技术 设计 搜索算法 配置信息 

学科分类：08[工学] 0835[0835] 081202[081202] 0812[工学-测绘类] 

核心收录：

馆 藏 号：203130248...