An Advanced File Recovery on XFS
DC Field | Value | Language |
---|---|---|
dc.contributor.advisor | 손태식 | - |
dc.contributor.author | Park Yongmin | - |
dc.date.accessioned | 2018-11-08T08:15:59Z | - |
dc.date.available | 2018-11-08T08:15:59Z | - |
dc.date.issued | 2016-02 | - |
dc.identifier.other | 22016 | - |
dc.identifier.uri | https://dspace.ajou.ac.kr/handle/2018.oak/12046 | - |
dc.description | 학위논문(석사)--아주대학교 일반대학원 :컴퓨터공학과,2016. 2 | - |
dc.description.tableofcontents | 1. INTRODUCTION 1 2. BACKGROUND AND APPLICATION 3 2.1 XFS File System 3 2.1.1 Feature 3 2.1.2 Structure 4 2.2 Digital Forensics 5 2.2.1 History 5 2.2.2 Standard Procedure 6 2.2.3 Elements for Having Legal Force 7 2.2.4 Applicable Areas 9 3. ANALYSIS OF XFS FILE SYSTEM METADATA 12 3.1 Key Elements for File Recovery 12 3.1.1 Superblock 12 3.1.2 Inode Core 13 3.1.3 Data Fork 14 3.1.4 Journaling 15 3.2 Deleted Mechanism based on Data Fork 17 3.2.1 Directory 17 3.2.2 Regular File 27 4. PROPOSED RECOVERY METHODOLOGY 29 4.1 Recovery Procedure 29 4.2 Recovery Methodology 29 5. TEST AND RESULT 32 6. CONCLUSION 33 | - |
dc.language.iso | eng | - |
dc.publisher | The Graduate School, Ajou University | - |
dc.rights | 아주대학교 논문은 저작권에 의해 보호받습니다. | - |
dc.title | An Advanced File Recovery on XFS | - |
dc.title.alternative | An Advanced File Recovery on XFS | - |
dc.type | Thesis | - |
dc.contributor.affiliation | 아주대학교 일반대학원 | - |
dc.contributor.alternativeName | Yongmin Park | - |
dc.contributor.department | 일반대학원 컴퓨터공학과 | - |
dc.date.awarded | 2016. 2 | - |
dc.description.degree | Master | - |
dc.identifier.localId | 739381 | - |
dc.identifier.url | http://dcoll.ajou.ac.kr:9080/dcollection/jsp/common/DcLoOrgPer.jsp?sItemId=000000022016 | - |
dc.subject.keyword | Digital Forensics | - |
dc.subject.keyword | Digital Investigation | - |
dc.subject.keyword | Deleted File Recovery | - |
dc.subject.keyword | XFS File System | - |
dc.subject.keyword | Journaling File System | - |
dc.subject.keyword | File System Metadata | - |
dc.description.alternativeAbstract | At present, as the amount of digitized information is increasing geometrically, the importance of digitized information as critical clues from the perspective of criminal investigation is also increasing. According to this trend, the importance of digital forensics has also magnified. As a fundamental technique of digital forensics, recovery of data deleted to conceal information is extremely important and needs to be studied. The XFS file system was designed to process huge files, and thus it is expected to be applied in server systems. In this paper, we analyze the XFS file system using its structure and metadata information; then, we propose a technique to recover the deleted files through previous analysis results, and verify it through testing. | - |
Items in DSpace are protected by copyright, with all rights reserved, unless otherwise indicated.