KEYWORDS: Forensic science, Mobile devices, Operating systems, Data storage, Cell phones, Open source software, Patents, Visualization, Image processing, Current controlled current source
With the popularity of the mobile devices, flash memories have drawn much attention of investigators. In this paper, a method to recover deleted files from YAFFS2 file system was proposed. The YAFFS2 tags stored in spare area of flash and the object header of each files provide a lot of opportunities for investigators, thus were used to find and reassemble all the original files. The simulated experiment results under Linux operating system showed that the proposed method could recover the deleted files as long as they are still on the flash.
Access to the requested content is limited to institutions that have purchased or subscribe to SPIE eBooks.
You are receiving this notice because your organization may not have SPIE eBooks access.*
*Shibboleth/Open Athens users─please
sign in
to access your institution's subscriptions.
To obtain this item, you may purchase the complete book in print or electronic format on
SPIE.org.
INSTITUTIONAL Select your institution to access the SPIE Digital Library.
PERSONAL Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.