Abstract

For the objective device failure and subjective data destruction,this paper raised a fast data recovery solution.In case that the file system was not corrupt or not damaged severely,the available worthy content in the File Allocation Table(FAT) could be selected and used for fast data recovery.If the file system was damaged severely(or the computer evidence taking needs),the entire space of the physical hard disk(including invisible region in the operation system) could be checked and the maximum of valid user data could be extracted.According to the data storage and deletion mechanism in the FAT32 file system,by scanning the unallocated space in FAT,a method was provided to restore the deleted file based on the cluster number of sector storing file header signature and the file size in the directory entry.The compound document structure was explored,and a method to extract useful information was provided according to the specification of document storage and the identity of the data stream.The experiments show that the scheme can simply and efficiently recover the deleted data.

Full Text
Paper version not known

Talk to us

Join us for a 30 min session where you can share your feedback and ask us any queries you have

Schedule a call

Disclaimer: All third-party content on this website/platform is and will remain the property of their respective owners and is provided on "as is" basis without any warranties, express or implied. Use of third-party content does not indicate any affiliation, sponsorship with or endorsement by them. Any references to third-party content is to identify the corresponding services and shall be considered fair use under The CopyrightLaw.