Share Email Print

Proceedings Paper

File recovering from YAFFS2 based on object headers and metadata
Author(s): Xue Yang; Ming Xu; Haiping Zhang
Format Member Price Non-Member Price
PDF $17.00 $21.00

Paper Abstract

With the popularity of the mobile devices, flash memories have drawn much attention of investigators. In this paper, a method to recover deleted files from YAFFS2 file system was proposed. The YAFFS2 tags stored in spare area of flash and the object header of each files provide a lot of opportunities for investigators, thus were used to find and reassemble all the original files. The simulated experiment results under Linux operating system showed that the proposed method could recover the deleted files as long as they are still on the flash.

Paper Details

Date Published: 14 March 2013
PDF: 8 pages
Proc. SPIE 8768, International Conference on Graphic and Image Processing (ICGIP 2012), 876806 (14 March 2013); doi: 10.1117/12.2010543
Show Author Affiliations
Xue Yang, Hangzhou Dianzi Univ. (China)
Ming Xu, Hangzhou Dianzi Univ. (China)
Haiping Zhang, Hangzhou Dianzi Univ. (China)

Published in SPIE Proceedings Vol. 8768:
International Conference on Graphic and Image Processing (ICGIP 2012)
Zeng Zhu, Editor(s)

© SPIE. Terms of Use
Back to Top
Sign in to read the full article
Create a free SPIE account to get access to
premium articles and original research
Forgot your username?