File Recovery Method in NTFS-Based Damaged RAID System
DC Field | Value | Language |
---|---|---|
dc.contributor.author | Choi, Jong-Hyun | - |
dc.contributor.author | Lee, Sangjin | - |
dc.date.accessioned | 2022-09-23T15:40:29Z | - |
dc.date.available | 2022-09-23T15:40:29Z | - |
dc.date.created | 2022-09-23 | - |
dc.date.issued | 2022-08-30 | - |
dc.identifier.issn | 2192-1962 | - |
dc.identifier.uri | https://scholar.korea.ac.kr/handle/2021.sw.korea/143763 | - |
dc.description.abstract | Due to the recent demand for mass storage devices, a redundant array of independent disks (RAID) is used in network-attached storage (NAS), direct-attached storage (DAS), servers, and workstations in addition to laptops and PCs. RAID makes multiple disks into volumes, and alternately stores stripe sizes on member disks. Due to these characteristics, RAID systems create several research issues in digital forensics. One of them, a damaged RAID system, is a case where the RAID configuration information is known, but some member disks are lost. The damaged RAID system has lost some member disks, so it stores a striped filesystem and files when reassembled into volumes. Striped file systems and files are distinctive forms in which data is fragmented within volumes so that meaningful data must be found in the fragmented data. This form is not supported by previous research or other digital forensics tools, and is unknown. In this paper, targeting the NTFS file system, which is the most used file system, we propose and verify a file recovery method from a damaged RAID system by combining RAID reconstruction, file system analysis, striped file system analysis, file carving, and striped file analysis. | - |
dc.language | English | - |
dc.language.iso | en | - |
dc.publisher | KOREA INFORMATION PROCESSING SOC | - |
dc.subject | FORENSIC ANALYSIS | - |
dc.title | File Recovery Method in NTFS-Based Damaged RAID System | - |
dc.type | Article | - |
dc.contributor.affiliatedAuthor | Lee, Sangjin | - |
dc.identifier.doi | 10.22967/HCIS.2022.12.040 | - |
dc.identifier.scopusid | 2-s2.0-85137161373 | - |
dc.identifier.wosid | 000849326100001 | - |
dc.identifier.bibliographicCitation | HUMAN-CENTRIC COMPUTING AND INFORMATION SCIENCES, v.12 | - |
dc.relation.isPartOf | HUMAN-CENTRIC COMPUTING AND INFORMATION SCIENCES | - |
dc.citation.title | HUMAN-CENTRIC COMPUTING AND INFORMATION SCIENCES | - |
dc.citation.volume | 12 | - |
dc.type.rims | ART | - |
dc.type.docType | Article | - |
dc.description.journalClass | 1 | - |
dc.description.journalRegisteredClass | scie | - |
dc.description.journalRegisteredClass | scopus | - |
dc.relation.journalResearchArea | Computer Science | - |
dc.relation.journalWebOfScienceCategory | Computer Science, Information Systems | - |
dc.subject.keywordPlus | FORENSIC ANALYSIS | - |
dc.subject.keywordAuthor | Damaged RAID | - |
dc.subject.keywordAuthor | File Recovery | - |
dc.subject.keywordAuthor | Striped File | - |
dc.subject.keywordAuthor | Striped File System | - |
Items in ScholarWorks are protected by copyright, with all rights reserved, unless otherwise indicated.
145 Anam-ro, Seongbuk-gu, Seoul, 02841, Korea+82-2-3290-2963
COPYRIGHT © 2021 Korea University. All Rights Reserved.
Certain data included herein are derived from the © Web of Science of Clarivate Analytics. All rights reserved.
You may not copy or re-distribute this material in whole or in part without the prior written consent of Clarivate Analytics.