Browse > Article
http://dx.doi.org/10.13089/JKIISC.2011.21.6.45

Recovery Techniques for Deleted Email Items in Email Client  

Jeong, Cho-Rong (Center for Information Security & Technologies, Korea University)
Lee, Keun-Gi (Center for Information Security & Technologies, Korea University)
Lee, Sang-Jin (Center for Information Security & Technologies, Korea University)
Publication Information
Journal of the Korea Institute of Information Security & Cryptology / v.21, no.6, 2011 , pp. 45-54 More about this Journal
Abstract
Corporations use e-mail as their primary method for internal communication and business processes. By their nature, the e-mails are in general used for major business processes that contain large amounts of business information. When there is a critical event, such as Technology leakage, an e-mail message can become important evidence. However, as there is a high likelihood that a suspect will intentionally erase an e-mail message, the ability to recover deleted e-mail is very important. This pater analyzes the deleted e-mail item structure in files of various e-mail clients, and explains the possibility and methods of recovery.
Keywords
Email Forensics; Email Recovery; Recovery; Email;
Citations & Related Records
Times Cited By KSCI : 1  (Citation Analysis)
연도 인용수 순위
1 Microsoft, [MS-PST] Outlook Personal Folders File Format (.pst) Structure Specification, Jun. 2010 URL : http://msdn. microsoft.com/en-us/library/ff38521 0(v=office.12).aspx
2 Lotus Notes URL : http://www-01.ibm. com/software/lotus/products/notes/
3 Importing_and_exporting_your_mail URL : http://kb.mozillazine.org/Importing_ and_exporting_your_mail
4 Joachim Metz, Personal Folder File (PFF) file format specification, Jan. 2010 URL : http://sourceforge.net/projects/libpff/ files/documentation/
5 KERNEL DATA RECOVERY, Kernel for Outlook Express, URL : http://www.kerneldatarecovery. com/outlook-express-r ecovery.html
6 Microsoft, "Windows XP에서 사용할 수 있는바로 가기 키 목록" URL: http://support.microsoft.com/kb/301583/ko, 2005
7 유병영, 박정흠, 방제완, 이상진, "비할당 영역 데이터 파편의 문서 텍스트 추출 방안에 관한 연구" 정보보호학회논문지, Vol.20 No.6, pp. 43-51,2010년 12월
8 PST Walker Software, PST Walker, URL:http://www.pstwalker.com/downl oad.html
9 Campaign monitor at : http://www.campaignmonitor. com/stats/email-clients/
10 박상헌, 김역, 이상진, "HTML 파일 복원 및 웹메일 분류에 관한 연구", Korea Crypt 2007, pp.113-121, 2007년 11월
11 Rachid Hadjidj, Mourad Debbabi, Hakim Lounis, Farkhund Iqbal, and Adam Szporer, Djamel Benredjem, "Towards an integrated e-mail forensic analysis framework", Digital Investigation 2009, pp. 124-137, Jan. 2009
12 Farkhund Iqbal, Hamad Binsalleeh, Benjamin C.M. Fung, Mourad Debbabi,"Mining writeprints from anonymous e-mails for forensic investigation", Digital Investigation 2010, pp. 1-9, Mar. 2010
13 Arne Schloh, OE dbx file format : 'file header', 'OE_Dbx_Deleted.html' URL : http://oedbx.aroh.de/zip/oedbx.zip/