Comparison between file carving from disk drive and disk image in open source environment

Abdullah Aljumah; Mohammad Yousuf Uddin; Mohammad Gulam Ahamad

doi:10.1109/ICCCT2.2014.7066755

Comparison between file carving from disk drive and disk image in open source environment

Abdullah Aljumah, Mohammad Yousuf Uddin, Mohammad Gulam Ahamad

Computer Engineering

Prince Sattam Bin Abdulaziz University

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

2 Scopus citations

Abstract

The file carving is one of the methods in data recovery from corrupted or damaged hard disk drives(HDD). Numerous open source commercial tools with different features are available in the market. In the present work an attempt was made for file carving with two different methods: 1) File carving from hard disk drive directly and 2) File carving from disk image. In this investigation the file carving tool PhotoRec and disk imaging tools such as Gddrescue, safecopy were used. Quiet a significant improvement in data recovery was found in case of file carving from disk image method. All most 1GB more data was resulted in file carving through disk image when compared with that of targeted HDD directly.

Original language	English
Title of host publication	International Conference on Computing and Communication Technologies, ICCCT 2014
Publisher	Institute of Electrical and Electronics Engineers Inc.
ISBN (Electronic)	9781479981502
DOIs	https://doi.org/10.1109/ICCCT2.2014.7066755
State	Published - 23 Mar 2014
Event	2014 International Conference on Computing and Communication Technologies, ICCCT 2014 - Hyderabad, India Duration: 11 Dec 2014 → 13 Dec 2014

Publication series

Name	International Conference on Computing and Communication Technologies, ICCCT 2014

Conference

Conference	2014 International Conference on Computing and Communication Technologies, ICCCT 2014
Country/Territory	India
City	Hyderabad
Period	11/12/14 → 13/12/14

Access to Document

10.1109/ICCCT2.2014.7066755

Cite this

Aljumah, A., Uddin, M. Y., & Ahamad, M. G. (2014). Comparison between file carving from disk drive and disk image in open source environment. In International Conference on Computing and Communication Technologies, ICCCT 2014 Article 7066755 (International Conference on Computing and Communication Technologies, ICCCT 2014). Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.1109/ICCCT2.2014.7066755

Aljumah, Abdullah ; Uddin, Mohammad Yousuf ; Ahamad, Mohammad Gulam. / Comparison between file carving from disk drive and disk image in open source environment. International Conference on Computing and Communication Technologies, ICCCT 2014. Institute of Electrical and Electronics Engineers Inc., 2014. (International Conference on Computing and Communication Technologies, ICCCT 2014).

@inproceedings{3506e12f95344c49a7709c195e86672e,

title = "Comparison between file carving from disk drive and disk image in open source environment",

abstract = "The file carving is one of the methods in data recovery from corrupted or damaged hard disk drives(HDD). Numerous open source commercial tools with different features are available in the market. In the present work an attempt was made for file carving with two different methods: 1) File carving from hard disk drive directly and 2) File carving from disk image. In this investigation the file carving tool PhotoRec and disk imaging tools such as Gddrescue, safecopy were used. Quiet a significant improvement in data recovery was found in case of file carving from disk image method. All most 1GB more data was resulted in file carving through disk image when compared with that of targeted HDD directly.",

author = "Abdullah Aljumah and Uddin, \{Mohammad Yousuf\} and Ahamad, \{Mohammad Gulam\}",

note = "Publisher Copyright: {\textcopyright} 2014 IEEE.; 2014 International Conference on Computing and Communication Technologies, ICCCT 2014 ; Conference date: 11-12-2014 Through 13-12-2014",

year = "2014",

month = mar,

day = "23",

doi = "10.1109/ICCCT2.2014.7066755",

language = "English",

series = "International Conference on Computing and Communication Technologies, ICCCT 2014",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

booktitle = "International Conference on Computing and Communication Technologies, ICCCT 2014",

address = "United States",

}

Aljumah, A, Uddin, MY & Ahamad, MG 2014, Comparison between file carving from disk drive and disk image in open source environment. in International Conference on Computing and Communication Technologies, ICCCT 2014., 7066755, International Conference on Computing and Communication Technologies, ICCCT 2014, Institute of Electrical and Electronics Engineers Inc., 2014 International Conference on Computing and Communication Technologies, ICCCT 2014, Hyderabad, India, 11/12/14. https://doi.org/10.1109/ICCCT2.2014.7066755

Comparison between file carving from disk drive and disk image in open source environment. / Aljumah, Abdullah; Uddin, Mohammad Yousuf; Ahamad, Mohammad Gulam.
International Conference on Computing and Communication Technologies, ICCCT 2014. Institute of Electrical and Electronics Engineers Inc., 2014. 7066755 (International Conference on Computing and Communication Technologies, ICCCT 2014).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Comparison between file carving from disk drive and disk image in open source environment

AU - Aljumah, Abdullah

AU - Uddin, Mohammad Yousuf

AU - Ahamad, Mohammad Gulam

PY - 2014/3/23

Y1 - 2014/3/23

N2 - The file carving is one of the methods in data recovery from corrupted or damaged hard disk drives(HDD). Numerous open source commercial tools with different features are available in the market. In the present work an attempt was made for file carving with two different methods: 1) File carving from hard disk drive directly and 2) File carving from disk image. In this investigation the file carving tool PhotoRec and disk imaging tools such as Gddrescue, safecopy were used. Quiet a significant improvement in data recovery was found in case of file carving from disk image method. All most 1GB more data was resulted in file carving through disk image when compared with that of targeted HDD directly.

AB - The file carving is one of the methods in data recovery from corrupted or damaged hard disk drives(HDD). Numerous open source commercial tools with different features are available in the market. In the present work an attempt was made for file carving with two different methods: 1) File carving from hard disk drive directly and 2) File carving from disk image. In this investigation the file carving tool PhotoRec and disk imaging tools such as Gddrescue, safecopy were used. Quiet a significant improvement in data recovery was found in case of file carving from disk image method. All most 1GB more data was resulted in file carving through disk image when compared with that of targeted HDD directly.

UR - http://www.scopus.com/inward/record.url?scp=84949927548&partnerID=8YFLogxK

U2 - 10.1109/ICCCT2.2014.7066755

DO - 10.1109/ICCCT2.2014.7066755

M3 - Conference contribution

AN - SCOPUS:84949927548

T3 - International Conference on Computing and Communication Technologies, ICCCT 2014

BT - International Conference on Computing and Communication Technologies, ICCCT 2014

PB - Institute of Electrical and Electronics Engineers Inc.

T2 - 2014 International Conference on Computing and Communication Technologies, ICCCT 2014

Y2 - 11 December 2014 through 13 December 2014

ER -

Aljumah A, Uddin MY, Ahamad MG. Comparison between file carving from disk drive and disk image in open source environment. In International Conference on Computing and Communication Technologies, ICCCT 2014. Institute of Electrical and Electronics Engineers Inc. 2014. 7066755. (International Conference on Computing and Communication Technologies, ICCCT 2014). doi: 10.1109/ICCCT2.2014.7066755

Comparison between file carving from disk drive and disk image in open source environment

Abstract

Publication series

Conference

Access to Document

Other files and links

Fingerprint

Cite this