DocumentCode :
3581371
Title :
Comparison between file carving from disk drive and disk image in open source environment
Author :
Aljumah, Abdullah ; Uddin, Mohammad Yousuf ; Ahamad, Mohammad Gulam
Author_Institution :
Coll. of Comput. Eng., Salaman bin Abdulaziz Univ., Al Kharj, Saudi Arabia
fYear :
2014
Firstpage :
1
Lastpage :
4
Abstract :
The file carving is one of the methods in data recovery from corrupted or damaged hard disk drives(HDD). Numerous open source commercial tools with different features are available in the market. In the present work an attempt was made for file carving with two different methods: 1) File carving from hard disk drive directly and 2) File carving from disk image. In this investigation the file carving tool PhotoRec and disk imaging tools such as Gddrescue, safecopy were used. Quiet a significant improvement in data recovery was found in case of file carving from disk image method. All most 1GB more data was resulted in file carving through disk image when compared with that of targeted HDD directly.
Keywords :
hard discs; public domain software; system recovery; Gddrescue; HDD; PhotoRec; damaged hard disk drives; data recovery; disk image; disk imaging tools; file carving; open source environment; safecopy; Disk drives; Drives; Forensics; Hard disks; Imaging; Linux; Operating systems;
fLanguage :
English
Publisher :
ieee
Conference_Titel :
Computer and Communications Technologies (ICCCT), 2014 International Conference on
Type :
conf
DOI :
10.1109/ICCCT2.2014.7066755
Filename :
7066755
Link To Document :
بازگشت