Translated Title
Research on Different Versions of YAFFS2 File Recovery Algorithm Based on Hash
Translated Abstract
In digital forensic, the technology of Android forensic becomes hot spot of research currently. And there are some research interests such as data extraction, data recovery for Android forensic. Among these research interests, data recovery is one of the most important step. YAFFS2 is a new lfash ifle system. It is designed for mobile devices which use NAND lfash and is widely used in Android devices. Thus, this paper proposes a method that recover different versions of YAFFS2 ifle based on Hash. Through extracting and storing the same object header information into Hash linked list, it can recover different versions of ifle. The experiment is executed under Linux system with YAFFS2 ifle system environment. And the experiment results show that the method can recover different types of ifle especially SQLite3 ifle and recover different versions of different types of ifle effectively. And this method lays the foundation for the follow-up research of Android forensic.
Translated Keyword
digital forensics
Android
ifle recovery
YAFFS2
Hash
Access Number
WF:perioarticalxxwlaq201605008
Corresponding authors email
