Hier finden Sie wissenschaftliche Publikationen aus den Fraunhofer-Instituten.

Resurrection: A carver for fragmented files

: Lambertz, M.; Uetz, R.; Gerhards-Padilla, E.


Gladyshev, P.:
Digital Forensics and Cyber Crime. Fifth International Conference, ICDF2C 2013 : Moscow, Russia, September 26-27, 2013, Revised Selected Papers
Cham: Springer International Publishing, 2014 (Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering 132)
ISBN: 978-3-319-14288-3 (Print)
ISBN: 978-3-319-14289-0 (Online)
International Conference on Digital Forensics and Cyber Crime (ICDF2C) <5, 2013, Moscow>
Fraunhofer FKIE ()

The recovery of deleted files is an important task frequently carried out by professionals in digital forensics and data recovery. When carried out without information from the file system, this process is called file carving. The techniques implemented in todayâs file carvers are mostly sufficient for non-fragmented files. Fragmented files, on the contrary, are not well supported. In this paper we present a general process model for the recovery of fragmented files. This model is then applied to the JPEG file format which is the de facto standard for digital photographs. Moreover, we evaluate popular open source carvers and compare them with our proposed approach.