Paper
14 March 2013 File recovering from YAFFS2 based on object headers and metadata
Xue Yang, Ming Xu, Haiping Zhang
Author Affiliations +
Proceedings Volume 8768, International Conference on Graphic and Image Processing (ICGIP 2012); 876806 (2013) https://doi.org/10.1117/12.2010543
Event: 2012 International Conference on Graphic and Image Processing, 2012, Singapore, Singapore
Abstract
With the popularity of the mobile devices, flash memories have drawn much attention of investigators. In this paper, a method to recover deleted files from YAFFS2 file system was proposed. The YAFFS2 tags stored in spare area of flash and the object header of each files provide a lot of opportunities for investigators, thus were used to find and reassemble all the original files. The simulated experiment results under Linux operating system showed that the proposed method could recover the deleted files as long as they are still on the flash.
© (2013) COPYRIGHT Society of Photo-Optical Instrumentation Engineers (SPIE). Downloading of the abstract is permitted for personal use only.
Xue Yang, Ming Xu, and Haiping Zhang "File recovering from YAFFS2 based on object headers and metadata", Proc. SPIE 8768, International Conference on Graphic and Image Processing (ICGIP 2012), 876806 (14 March 2013); https://doi.org/10.1117/12.2010543
Lens.org Logo
CITATIONS
Cited by 4 scholarly publications.
Advertisement
Advertisement
RIGHTS & PERMISSIONS
Get copyright permission  Get copyright permission on Copyright Marketplace
KEYWORDS
Forensic science

Mobile devices

Operating systems

Data storage

Cell phones

Current controlled current source

Image processing

RELATED CONTENT


Back to Top