• Title/Summary/Keyword: Data Carving

Search Result 26, Processing Time 0.021 seconds

A Framework for Data Recovery and Analysis from Digital Forensics Point of View (디지털 포렌식 관점의 데이터 복구 및 분석 프레임워크)

  • Kim, Jin-Kook;Park, Jung-Heum;Lee, Sang-Jin
    • The KIPS Transactions:PartC
    • /
    • v.17C no.5
    • /
    • pp.391-398
    • /
    • 2010
  • Most of digital forensics tools focus on file analysis of allocated area on storage. So, there is a lack of recovery methods for deleted files by suspects or previously used files. To efficiently analyze deleted files, digital forensic tools depend on data recovery tools. These process not appropriate for quick and efficient responses the incident or integrity preservation. This paper suggests the framework for data recovery and analysis tools from digital forensics point of view and presents implementation results.

A Recovery Technique of PDF File in the Unit of Page (PDF 파일의 페이지단위 복구 기법)

  • Jang, Jeewon;Bang, Seung Gyu;Han, Jaehyeok;Lee, Sang Jin
    • KIPS Transactions on Computer and Communication Systems
    • /
    • v.6 no.1
    • /
    • pp.25-30
    • /
    • 2017
  • The influence of the data deletion method which is one of anti-forensic techniques is substantial in terms of forensic analysis compared to its simplicity of the act. In academic world, recovery techniques on deleted files have been continuously studied in response to the data deletion method and representatively, the file system-based file recovery technique and file format based recovery technique exist. If there's metadata of deleted file in file system, the file can be easily recovered by using it, but if there's no metadata, the file is recovered by using the signature-based carving technique or the file format based recovery technique has to be applied. At this time, in the file format based recovery technique, the file structure analysis and possible recovery technique should be provided. This paper proposes the page recovery technique on deleted PDF file based on the structural characteristics of PDF file. This technique uses the tag value of page object which constitutes one page of PDF file. Object is extracted by utilizing each tag value as a kind of signature and by analyzing extracted object, the metadata of PDF file is recombined and then it's reconfigured page by page. Recovering by page means that even if deleted PDF file is damaged, even some pages consisting of PDF file can be recovered. Generally, if the file system based file is not recoverable, deleted file is recovered by applying the signature based carving technique. The technique which we proposed in this paper can recover PDF files that are damaged. In the digital forensic perspective, it can be utilized to recover more data than previously.

An Arbitrary Disk Cluster Manipulating Method for Allocating Disk Fragmentation of Filesystem (파일시스템의 클러스터를 임의로 할당하여 디스크를 단편화하기 위한 방법)

  • Cho, Gyu-Sang
    • Journal of Korea Society of Digital Industry and Information Management
    • /
    • v.16 no.2
    • /
    • pp.11-25
    • /
    • 2020
  • This study proposes a method to manipulate fragmentation of disks by arbitrarily allocating and releasing the status of a disk cluster in the NTFS file system. This method allows experiments to be performed in several studies related to fragmentation problems on disk cluster. Typical applicable research examples include testing the performance of disk defragmentation tools according to the state of fragmentation, establishing an experimental environment for fragmented file carving methods for digital forensics, setting up cluster fragmentation for testing the robustness of data hiding methods within directory indexes, and testing the file system's disk allocation methods according to the various version of Windows. This method suggests how a single file occupies a cluster and presents an algorithm with a flowchart. It raises three tricky problems to solve the method, and we propose solutions to the problems. Experiments for allocating the disk cluster to be fragmented to the maximum extent possible, it then performs a disk defragmentation experiment to prove the proposed method is effective.

Study on formal analysis of carving boards in 'Haejuban' (해주반 판각의 조형분석에 관한 연구)

  • Lee, Yoo-Jin;Lim, Seung-Taeg
    • Journal of the Korea Furniture Society
    • /
    • v.20 no.5
    • /
    • pp.414-430
    • /
    • 2009
  • This paper is designed for the purpose of suggesting Figurative data applicable to modern furniture designs through doing research on Haejuban's engraving that includes excellent Figurative beauty among Korean traditional lighted-floor type furnitures. As a result of the analysis, Haejuban's(Traditional Korean dining table) engraving pattern type was mainly divided into independent patterns and combined patterns. The patterns expressed the most among them are peony patterns. The patterns expressed by the engraving mostly showed the Figurative characteristics of symmetry. The patterns shown in Haejuban's engraving wish or stand for richness, long life, lucky, fidelity, divinity, happiness, success and so on. The species of trees used for Haejuban were a total of 8 kinds such as ginkgo trees, zelkova trees, walnut trees, wild-walnut trees, chinaberry trees and other scrub trees. Ginkgo trees were used the most among them.

  • PDF

Types of Business Leadership Based on Creative Leadership in Art Education

  • Jae-Seong SEOL
    • East Asian Journal of Business Economics (EAJBE)
    • /
    • v.11 no.3
    • /
    • pp.37-45
    • /
    • 2023
  • Purpose - This research contributes to the existing literature by shedding light on a unique intersection of creativity and leadership, carving out a niche that calls for further exploration. Thus, this study addresses the questions regarding how creative leadership manifests within the context of art education and what the distinct types of business leadership from applying creative leadership principles are in art education? Research design, data, and methodology - This research is made up of two stages to collect textual data from the literature. The first stage involves screening titles and abstracts to weed out studies that overtly lack alignment with the research's focus. The second stage involves a full-text review of the remaining studies to ascertain their suitability based on the research objectives. Result: There are four types of business leadership on Creative Leadership in Art Education, such as Visionary Artistic Leadership, Collaborative Expressionist Leadership, Adaptive Impressionist Leadership, Experimental Abstract Leadership, Experimental Abstract Leadership. Conclusion - The research could conclude that 'Visionary Artistic Leadership' offers practitioners a compelling strategy for igniting innovation within their teams and organizations. HR practitioners can foster a culture of daring creativity by encouraging leaders to embrace visionary thinking. To implement this style, HR professionals can nurture individuals strongly inclined towards innovative ideation.

A Study on Message Acquisition from Electron Apps: Focused on Collaboration Tools such as Jandi, Slack, and Microsoft Teams (Electron App의 메시지 획득 방안에 관한 연구: 협업 툴 잔디, 슬랙, 팀즈 중심으로)

  • Kim, Sung-soo;Lee, Sung-jin
    • Journal of the Korea Institute of Information Security & Cryptology
    • /
    • v.32 no.1
    • /
    • pp.11-23
    • /
    • 2022
  • Collaboration tools are used widely as non-face-to-face work increases due to social distancing after COVID-19. The tools are being developed in a cross-platform manner with 'Electron', an open source framework based on Chromium, to ensure accessibility on multiple devices. Electron Apps, applications built with Electron framework, store data in a manner similar to Chromium-based web browsers, so the data can be acquired in the same way as the data is acquired from a web browser. In this paper we analyze the data structure of web storage and suggest a method to get the message from Electron Apps focused on collaboration tools such as Jandi, Slack, and Microsoft Teams. For Jandi, we get the message from Cache by using previously developed tools, and in the case of Slack and Microsoft Teams, we get the message from IndexedDB by using the message carving tool we developed.

A Study on the Characteristics of Women's Dress Design Revealed in Goguryo Tomb Mural Paintings - By Focusing on Pyeongyang and Its Adjacent Area - (고구려 고분 벽화에 나타난 여자 복식 특징과 디자인 고증 연구 - 평양 지역을 중심으로 -)

  • Lee, Un-Young;Jung, Hee-Jung;Lee, In-Seong
    • The Research Journal of the Costume Culture
    • /
    • v.15 no.3 s.68
    • /
    • pp.541-549
    • /
    • 2007
  • Goguryo is the ancient dynasty which established the system of ancient state earlier than Baekje and Sila, and was a strong political and military power. Unlike the rock carving works of prehistoric times, mural paintings composed of line and color tones in tombs are characterized more by its social aspect and symbolism as a serious form of art than other cultural heritage of Goguryo. In response to that, this study analyzed the dress and ornaments of women found in Anak No. 3 ancient tomb, Susan-ri ancient tomb, Ssangyeongchong, which are the ancient tombs in Pyeongyang from 4th century to 5th century, have relatively more ancient tombs than any other places and preserved the mural paintings well, by using the plate, slide, literature and data related to relics in order to figure out the characteristics of women's dress and ornament in Goguryo, and the lifestyle and social aspect of Goguryo.

  • PDF

The Characteristics of Heavy Rainfall in Summer over the Korean Peninsula from Precipitation Radar of TRMM Satellite : Case Study (TRMM/PR 관측에 의한 한반도에서의 여름철 호우의 특성 : 사례연구)

  • 박혜숙;정효상;노유정
    • Korean Journal of Remote Sensing
    • /
    • v.16 no.1
    • /
    • pp.55-64
    • /
    • 2000
  • The Tropical Rainfall Measuring Mission(TRMM) Satellite was launched in November 1997, carving into orbit the first space-borne Precipitation Radar(PR). The main objective of the TRMM is to obtain and study multi-year science data sets of tropical and subtropical rainfall measurements. In the present investigation, the characteristics of heavy rainfall cases over Korea in 1998 and 1999 are analyzed using the TRMM/PR dat3. We compare the rainrate measured from TRMM/PR with the accumulated rainfall data for 10 minutes tv Automatic Weather System(AWS). Especially, horizontal cross-section of rainrate with height and longitude in the precipitating clouds are investigated. As a result of the comparison with GMS-5 IR1, the TRMM/PR data delineate well the rain type( i.e. convective, stratiform cloud and others), height of storm top and instantaneous rainrate in the precipitating clouds. The vertical structure with height and horizontal cross-section of rainrate along the longitude show the orographic effect on the rainfall. TRMM/PR instrument measures the rainrate below 6 ㎜/hr more than AWS rainguages and inclined to underestimate the rainrate than rainguages for the whole area.

Study on Recovery Techniques for the Deleted or Damaged Event Log(EVTX) Files (삭제되거나 손상된 이벤트 로그(EVTX) 파일 복구 기술에 대한 연구)

  • Shin, Yonghak;Cheon, Junyoung;Kim, Jongsung
    • Journal of the Korea Institute of Information Security & Cryptology
    • /
    • v.26 no.2
    • /
    • pp.387-396
    • /
    • 2016
  • As the number of people using digital devices has increased, the digital forensic, which aims at finding clues for crimes in digital data, has been developed and become more important especially in court. Together with the development of the digital forensic, the anti-forensic which aims at thwarting the digital forensic has also been developed. As an example, with anti-forensic technology the criminal would delete an digital evidence without which the investigator would be hard to find any clue for crimes. In such a case, recovery techniques on deleted or damaged information will be very important in the field of digital forensic. Until now, even though EVTX(event log)-based recovery techniques on deleted files have been presented, but there has been no study to retrieve event log data itself, In this paper, we propose some recovery algorithms on deleted or damaged event log file and show that our recovery algorithms have high success rate through experiments.

The Estimation and Comparison of Flexural Crack Width Considering Bonding Characteristics in Reinforced Concrete Members (부착특성을 고려한 철근콘크리트 부재의 휨 균열폭 산정 및 비교)

  • Ko, Won-Jun;Min, Byung-Chul;Park, Sun-Kyu
    • Journal of the Korea Concrete Institute
    • /
    • v.18 no.5 s.95
    • /
    • pp.579-588
    • /
    • 2006
  • In recent years, the availability of high-strength reinforcing and prestressing steels leads us to build economically and efficiently designed concrete structural members. One of critical problems faced to the structural engineers dealing with these types of structural member is controls of crack width that is used as a criterion for the serviceability in the limit state design. Especially, flexural cracking must be controlled to secure the structural safety and to improve the durability as well as serviceability of the load carving members. The proposed method utilizes the results of pure tension test in which tensile loads are applied both side of specimen, done by Ikki. The bond characteristics of deformed reinforcing bar under pure tension is considered by the area of concrete and rib area. The results of proposed method are compared with the test data and the results show that the proposed method can take into account the dimensions, variation of sectional properties, and direction of reinforcing and gives more accurate maximum bond stress and corresponding relative slip than the existing methods. the characteristics of bonding is considered by using dimensionless slip magnitude and effective reinforcement ratio. The validity of the proposed equation is verified by test experimental data.