The evolution of file carving

IEEE Signal Processing Magazine

Volumn 26, Issue 2, 2009, Pages 59-71

  Pal, Anandabrata ^a   Memon, Nasir ^a  

^a POLYTECHNIC UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CELLULAR TELEPHONES; DIGITAL DEVICES; TELECOMMUNICATION EQUIPMENT; TELEPHONE SETS;

CELL PHONE; COMPUTER USAGES; FILE CARVING; RESEARCH CENTER;

MOBILE PHONES;

EID: 85032750978     PISSN: 10535888     EISSN: None     Source Type: Journal    
DOI: 10.1109/MSP.2008.931081     Document Type: Article

References (24)

1. Pew Global Attitudes Project [Online]. Available: http:// pewglobal.org/reports/pdf/258.pdf
2. S. Garfinkel, "Carving contiguous and fragmented files with fast object validation," in Proc. 2007 Digital Forensics Research Workshop (DFRWS), Pittsburgh, PA, Aug. 2007, pp. 4S:2-12.
3. A. Pal and N. Memon, "Automated reassembly of file fragmented images using greedy algorithms," IEEE Trans. Image Processing, vol. 15, no. 2, pp. 385-393, Feb. 2006.
4. A. Pal, K. Shanmugasundaram, and N. Memon, "Reassembling image fragments," in Proc. ICASSP, Hong Kong, Apr. 2003, vol. 4, pp. IV-732-5.
5. A. Pal, T. Sencar, and N. Memon, "Detecting file fragmentation point using sequential hypothesis testing," Digit. Investig., to be published.
6. G. G. Richard, III and V. Roussev, "Scalpel: A frugal, high performance file carver," in Proc. 2005 Digital Forensics Research Workshop (DFRWS), New Orleans, LA, Aug. 2005.
7. Foremost 1.53 [Online]. Available: http://foremost.sourceforge.net
8. K. Shanmugasundaram and N. Memon, "Automatic reassembly of document fragments via data compression," presented at the 2nd Digital Forensics Research Workshop, Syracuse, NY, July 2002.
9. K. Wang, S. Stolfo, "Anomalous payload-based network intrusion detection," in Recent Advances in Intrusion Detection, ( Lecture Notes in Computer Science), vol. 3224. New York: Springer-Verlag, 2004, pp. 203-222.
10. W.J. Li, K. Wang, S. Stolfo, and B. Herzog, "Fileprints: Identifying file types by n-gram analysis," in Proc. 6th IEEE Systems, Man and Cybernetics Information Assurance Workshop, 2005, pp. 64-67.
11. M. McDaniel and M. Heydari, "Content based file type detection algorithms," in Proc. 36th Annu. Hawaii Int. Conf. System Sciences (HICSS'03) - Track 9, IEEE Computer Society, Washington, D.C., 2003, p. 332.1
12. B. Carrier, File System Forensic Analysis. Boston, MA: Pearson Education, Addison-Wesley Professional, 2005.
13. M. Karresand and N. Shahmehri, "Oscar file type identification of binary data in disk clusters and RAM pages," in Proc. IFIP Security and Privacy in Dynamic Environments, vol. 201, 2006, pp. 413-424.
14. M. Karresand and N. Shahmehri, "File type identification of data fragments by their binary structure," in Proc. IEEE Information Assurance Workshop, June 2006, pp. 140-147.
15. Cor J. Veenman, "Statistical disk cluster classification for file carving," in Proc. IEEE 3rd Int. Symp. Information Assurance and Security, Manchester, U.K., 2007, pp. 393-398.
16. STORAGEsearch.com. Data Recovery from Flash SSDs? [Online]. Available: http://www.storagesearch.com/recovery.html
17. A. Wald, Sequential Analysis. New York: Dover, 1947.
18. Amiga Smart Filesystem [Online]. Available: http://www.xs4all.nl/hjohn/ SFS
19. E. W. Dijkstra, "A note on two problems in connexion with graphs," Numerische Mathematik, vol. 1, pp. 269-271, 1959.
20. L.W. McVoy and S.R. Kleiman, "Extent-like performance from a UNIX file system," in Proc. USENIX, Winter '91, Dallas, TX, 1991, pp. 33-43.
21. A. Sweeney, D. Doucette, W. Hu, C. Anderson, M. Nishimoto, and G. Peck, "Scalability in the XFS file system," in Proc. USENIX 1996 Annu. Tech. Conf., San Diego, CA, 1996, pp. 1-14.
22. B. Carrier, V. Wietse, and C. Eoghan, File Carving Challenge 2006 [Online]. Available: http://www.dfrws.org/2006/challenge
23. B. Carrier, V. Wietse, and C. Eoghan, File Carving Challenge 2007 [Online]. Available: http://www.dfrws.org/2007/challenge
24. J. G. Cleary and W. J. Teahan, "Unbounded length context for ppm," Comput. J., vol. 40, no. 2/3, pp. 67-75, 1997.