14 March 2013 File recovering from YAFFS2 based on object headers and metadata
Author Affiliations +
Proceedings Volume 8768, International Conference on Graphic and Image Processing (ICGIP 2012); 876806 (2013) https://doi.org/10.1117/12.2010543
Event: 2012 International Conference on Graphic and Image Processing, 2012, Singapore, Singapore
Abstract
With the popularity of the mobile devices, flash memories have drawn much attention of investigators. In this paper, a method to recover deleted files from YAFFS2 file system was proposed. The YAFFS2 tags stored in spare area of flash and the object header of each files provide a lot of opportunities for investigators, thus were used to find and reassemble all the original files. The simulated experiment results under Linux operating system showed that the proposed method could recover the deleted files as long as they are still on the flash.
© (2013) COPYRIGHT Society of Photo-Optical Instrumentation Engineers (SPIE). Downloading of the abstract is permitted for personal use only.
Xue Yang, Xue Yang, Ming Xu, Ming Xu, Haiping Zhang, Haiping Zhang, } "File recovering from YAFFS2 based on object headers and metadata", Proc. SPIE 8768, International Conference on Graphic and Image Processing (ICGIP 2012), 876806 (14 March 2013); doi: 10.1117/12.2010543; https://doi.org/10.1117/12.2010543
PROCEEDINGS
8 PAGES


SHARE
Back to Top