Performance Analysis of File Carving Tools

Abstract : File carving is the process of recovering files based on the contents of a file in scenarios where file system metadata is unavailable. In this research a total of 6 file carving tools were tested and reviewed to evaluate the performance quality of each. Comparison of findings to a previous similar study was conducted and showed variable performance advances. A new file carving data set was also authored and testing determined that the wider variety of file types and structures proved challenging for most tools to efficiently recover a high percentage of files. Results also highlighted the ongoing issue with complete recovery and reassembly of fragmented files. Future research is required to provide digital forensic investigators & data recovery practitioners with efficient and accurate file carving tools to maximise file recovery and minimise invalid file output.
Type de document :
Communication dans un congrès
Lech J. Janczewski; Henry B. Wolfe; Sujeet Shenoi. 28th Security and Privacy Protection in Information Processing Systems (SEC), Jul 2013, Auckland, New Zealand. Springer, IFIP Advances in Information and Communication Technology, AICT-405, pp.419-433, 2013, Security and Privacy Protection in Information Processing Systems. 〈10.1007/978-3-642-39218-4_31〉
Liste complète des métadonnées

Littérature citée [19 références]  Voir  Masquer  Télécharger

https://hal.inria.fr/hal-01463843
Contributeur : Hal Ifip <>
Soumis le : jeudi 9 février 2017 - 17:24:23
Dernière modification le : mercredi 17 octobre 2018 - 20:10:03
Document(s) archivé(s) le : mercredi 10 mai 2017 - 14:50:08

Fichier

978-3-642-39218-4_31_Chapter.p...
Fichiers produits par l'(les) auteur(s)

Licence


Distributed under a Creative Commons Paternité 4.0 International License

Identifiants

Citation

Thomas Laurenson. Performance Analysis of File Carving Tools. Lech J. Janczewski; Henry B. Wolfe; Sujeet Shenoi. 28th Security and Privacy Protection in Information Processing Systems (SEC), Jul 2013, Auckland, New Zealand. Springer, IFIP Advances in Information and Communication Technology, AICT-405, pp.419-433, 2013, Security and Privacy Protection in Information Processing Systems. 〈10.1007/978-3-642-39218-4_31〉. 〈hal-01463843〉

Partager

Métriques

Consultations de la notice

126

Téléchargements de fichiers

756