Browse > Article
http://dx.doi.org/10.13089/JKIISC.2014.24.5.885

The Research on the Recovery Techniques of Deleted Files in the XFS Filesystem  

Ahn, Jae-Hyoung (Center for Information Security Technologies, Korea University)
Park, Jung-Heum (Center for Information Security Technologies, Korea University)
Lee, Sang-Jin (Center for Information Security Technologies, Korea University)
Publication Information
Journal of the Korea Institute of Information Security & Cryptology / v.24, no.5, 2014 , pp. 885-896 More about this Journal
Abstract
The files in computer storages can be deleted due to unexpected failures or accidents. Some malicious users often delete data by himself for anti-forensics. If deleted files are associated with crimes or important documents in business, they should be recovered and the recovery tool is necessary. The recovery methods and tools for some filesystems such as NTFS, FAT, and EXT have been developed actively. However, there has not been any researches for recovering deleted files in XFS filesystem applied to NAS or CCTV. In addition, since the current related tools are based on the traditional signature detection methods, they have low recovery rates. Therefore, this paper suggests the recovery methods for deleted files based on metadata and signature detection in XFS filesystem, and verifies the results by conducting experiment in real environment.
Keywords
XFS; file recover; data recover; XFS filesystem;
Citations & Related Records
연도 인용수 순위
  • Reference
1 C. Hellwing, "XFS:the big storage file system for Linux," Communications of the ACM, 40, pp. 71-79, May 1997.
2 A Sweeny, D. Doucette, W. Hu, C. Anderson, M. Nishimoto and G. Peck, "Scalability in the XFS File System," USENIX, 1996.
3 Pal A and Memon N. "The Evolution of File Carving," iEEE SIGNAL PROCESSING MAGAZINE 2009.
4 Brian Carrier, "File system forensic analysis," Addison-Wesley, 2005.
5 Jungheum Park, "Advanced Digital Forensic System for Data Fragments," Korea University, 2013.
6 M.Karresand and N.Shahmehri, "File type identification of data fragments by their binary structure," IEEE Information Assurance Workshop, June 2006.
7 http://www.ufsexplorer.com
8 Sekie Amanuel Majore, Changhoon Lee, Taeshik Shon, "XFS File System and File Recovery Tools," International Journal of Smart home, Vol7, No.1, Jan 2013.
9 Silicon Graphics Inc, "XFS Filesystem Structure," 2006.
10 http://linux.die.net/man/8/xfs_db