DocumentCode :
2130077
Title :
A Comprehensive Literature Review of File Carving
Author :
Poisel, R. ; Tjoa, S.
Author_Institution :
Inst. of IT Security Res., St. Poelten Univ. of Appl. Sci., St. Polten, Austria
fYear :
2013
fDate :
2-6 Sept. 2013
Firstpage :
475
Lastpage :
484
Abstract :
File carving is a recovery technique allowing file recovery without knowledge about contextual information such as file system metadata. Due to recent advancements in research, file carving has become an essential technique for both general data recovery and digital forensics investigations. During the last few years a considerable amount of publications has been published on the topic of file carving. Out of around 130 publications in this field we selected 70 key papers with major contributions to the topic in order to identify potential fields of future research activities. The first contribution of this paper is a survey on state-of-the-art literature supporting researchers and practitioners in gaining a comprehensive view on the progress in file carving research. In addition to that, the second major contribution of this paper is a (preliminary) file carving ontology. The purpose of the ontology presented within this paper is to push forward recovery approaches that are based on knowledge bases processible by computer systems.
Keywords :
digital forensics; knowledge based systems; meta data; ontologies (artificial intelligence); digital forensics investigations; file carving ontology; file recovery; file system metadata; forward recovery approaches; general data recovery; knowledge bases; literature review; recovery technique; Accuracy; Computers; Digital forensics; Ontologies; Support vector machines; Transform coding; Classification; Data Recovery; Digital Forensics; File; File Carving; Fragment; Knowledge Base; Ontology;
fLanguage :
English
Publisher :
ieee
Conference_Titel :
Availability, Reliability and Security (ARES), 2013 Eighth International Conference on
Conference_Location :
Regensburg
Type :
conf
DOI :
10.1109/ARES.2013.62
Filename :
6657278
Link To Document :
بازگشت