Abstract
The core technical problems of file recovery are the first cluster number clearing of high-order two bytes and the fragmentation in the file. The algorithm proposed in this paper makes full use of file system information such as FAT, creation time, file identification and fragmentation characteristics, recover easy ones and the files difficult to recover which are recoverable at first, and then analyzes the status of remaining fragments after eliminating many interference of fragments. Experimental results show that the algorithm can significantly reduce the complexity of fragments and improve the accuracy of file recovery.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Similar content being viewed by others
References
Liu, W.: In-Depth Disclosure of Data Recovery Technology, 2nd edn, pp. 248–257. Electronic Industry Press, Beijing (2016)
Guo, B., Youquan, M.: A computer forensics method based on FAT32 file system. Comput. Appl. Softw. 1, 260–262 (2010)
Windows 10 Operating system version of the latest market share data released (2019). http://notebook.it168.com/a2019/0131/5155/000005155901.shtml
Yang, D.: Fast recovery method of effective data based on FAT32. J. Comput. Appl. 9, 2500–2503 (2012)
Fan, H., Lipeng, W.: Research on data recovery technology of FAT32 file system. Sci. Technol. Inf. 36, 55–57 (2013)
Hong, G.: Research on JPEG File Duplication Based on Thumbnail. Hangzhou Dianzi University (2012)
Dai, S., Tu, Y.: Data Recovery Technology (Classic Reproduction Version). Electronic Industry Press, Beijing (2014)
Tang, Y., et al.: Recovery of heavily fragmented JPEG files. Digit. Investig. 18, 108–117 (2016)
Digital Assembly. Smart Carver (2015). http://digital-assembly.com/products/smartcarver-dc3/
Garfinkel, S.L.: Carving contiguous and fragmented files with fast object validation. Digit. Investig. 4, 2–12 (2007)
Guangyu, G., Shujuan, Z.: A file recovery method in a FAT32 file system. Netw. New Media Technol. 2, 36–41 (2016)
Acknowledgements
This work is supported by Projects of Shandong Province Higher Educational Science and Technology Program under Grant J18KA357, J16LN19, J18KA383; Doctoral Research Fund of Shandong Jianzhu University under GrantXNBS1810; Teaching Innovation project of Shandong University of Political Science and Law under Grant 2017JYB009; projects of Shandong University of Political Science and Law, Grant No. 2016Z03B, 2015Z03B; and also supported (in part) by the Key Research and Development Project of Shandong Province under Grant 2019GGX101068.
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2019 Springer Nature Switzerland AG
About this paper
Cite this paper
Chang, X., Hao, F., Wu, J., Feng, G. (2019). File Recovery of High-Order Clearing First Cluster Based on FAT32. In: Vaidya, J., Zhang, X., Li, J. (eds) Cyberspace Safety and Security. CSS 2019. Lecture Notes in Computer Science(), vol 11982. Springer, Cham. https://doi.org/10.1007/978-3-030-37337-5_38
Download citation
DOI: https://doi.org/10.1007/978-3-030-37337-5_38
Published:
Publisher Name: Springer, Cham
Print ISBN: 978-3-030-37336-8
Online ISBN: 978-3-030-37337-5
eBook Packages: Computer ScienceComputer Science (R0)