论文信息 - A Framework for Data Recovery and Analysis from Digital Forensics Point of View

A Framework for Data Recovery and Analysis from Digital Forensics Point of View

Most of digital forensics tools focus on file analysis of allocated area on storage. So, there is a lack of recovery methods for deleted files by suspects or previously used files. To efficiently analyze deleted files, digital forensic tools depend on data recovery tools. These process not appropriate for quick and efficient responses the incident or integrity preservation. This paper suggests the framework for data recovery and analysis tools from digital forensics point of view and presents implementation results.

Sangjin Lee | Jin-Kook Kim | Jungheum Park

[1] Michael Cohen,et al. PyFlag - An advanced network forensic framework , 2008, Digit. Investig..

[2] Eugene H. Spafford,et al. An Event-Based Digital Forensic Investigation Framework , 2004 .

[3] Ricci S. C. Ieong,et al. FORZA - Digital forensics investigation framework that incorporate legal issues , 2006, Digit. Investig..

[4] Peter Gutmann,et al. Secure deletion of data from magnetic and solid-state memory , 1996 .

[5] W. Teepe,et al. Protocol Analysis , 2012 .

[6] William A. Arbaugh,et al. FATKit: A framework for the extraction and analysis of digital forensic data from volatile system memory , 2006, Digit. Investig..

[7] Nicole Beebe,et al. A hierarchical, objectives-based framework for the digital investigations process , 2005, Digit. Investig..

[8] Gregg H. Gunsch,et al. An Examination of Digital Forensic Models , 2002, Int. J. Digit. EVid..

[9] Simson L. Garfinkel,et al. Carving contiguous and fragmented files with fast object validation , 2007, Digit. Investig..

[10] Steve Bunting,et al. EnCase Computer Forensics -- The Official EnCE: EnCase Certified Examiner Study Guide , 2006 .

[11] Brian D. Carrier,et al. File System Forensic Analysis , 2005 .

[12] Jeroen van den Bos,et al. An Open Source Forensic Software Framework for Acquiring and Decoding Data Stored in Electronic Devices , 2005, Int. J. Digit. EVid..