Systematic Literature Review on Data Carving in Digital Forensic

Alherbawi, Nadeem; Shukur, Zarina; Sulaiman, Riza

doi:10.1016/j.protcy.2013.12.165

Cited by 24 publications

(14 citation statements)

References 14 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Secara garis besar, terdapat 2 metode yang digunakan untuk melakukan file recovery, yaitu dengan melakukan analisis terhadap file system dan analisis terhadap raw data. Salah satu metode file recovery dengan metode analisis terhadap raw data adalah metode carving [7], [10], [13], [14].…”

Section: Pendahuluanunclassified

“…Sedangkan pada tingkat advanced metode carving dapat digunakan meskipun terhadap file yang terfragmentasi karena metode carving yang digunakan melakukan analisis terhadap struktur file tersebut. Metode file carving dapat dibagi menjadi 3 (tiga) kategori yang diurutkan berdasarkan tingkat kerumitannya, yaitu Signature-Based, Structure-Based, dan Content-Based [3], [7], [13].…”

Section: Pendahuluanunclassified

See 1 more Smart Citation

Identifikasi dan Recovery File JPEG dengan Metode Signature-Based Carving dalam Model Automata

Ardiansyah¹,

Hardi²,

Gata³

2020

Komputika

View full text Add to dashboard Cite

Penggunaan format gambar JPEG semakin meningkat seiring dengan meningkatnya produksi foto digital yang dipicu oleh kemunculan smartphone dan perkembangan sosial media. Hal tersebut membuat file JPEG berperan penting dalam proses digital forensik, sehingga banyak metode identifikasi dan recovery file JPEG yang dikembangkan. Paper ini berusaha melihat proses data carving file JPEG dengan metode Signature-Based Carving, metode carving yang paling sederhana, dengan sebuah model diagram Finite State Automata, sebuah model algoritma dasar dalam teori komputasi.

show abstract

Section: Pendahuluanunclassified

Identifikasi dan Recovery File JPEG dengan Metode Signature-Based Carving dalam Model Automata

Ardiansyah¹,

Hardi²,

Gata³

2020

Komputika

View full text Add to dashboard Cite

show abstract

“…O trabalho de [Alherbawi et al 2013] consiste de uma Revisão Sistemática da Literatura (RSL), onde suas questões de pesquisa são sobre a medição da qualidade de ferramentas Data Carving, as diferentes técnicas de Carving e as principais dificuldades encontradas pelos pesquisadores nessaárea. As questões de pesquisa tratam de assuntos diferentes das que serão tratadas nesse artigo, onde se estará focado nos arquivos falsopositivos.…”

Section: Trabalhos Relacionadosunclassified

Análise de Métodos para o Tratamento de Arquivos Falso-Positivos a partir de Ferramentas de Recuperação de Dados Digitais: Uma Revisão Sistemática da Literatura

Pereira¹,

Silva²,

Bezerra³

et al. 2019

Anais Do VIII Workshop De Forense Computacional (WFC 2019)

View full text Add to dashboard Cite

O desenvolvimento da tecnologia tem gerado informações que precisam de armazenamento na forma de arquivos digitais, necessitando, assim, de dispositivos secundários. No entanto, esses arquivos podem ser deletados de forma intencional ou por acidente, motivando a sua recuperação. No processo de recuperação de dados em mídias digitais, além de recuperar os arquivos desejados, também são gerados arquivos denominados de falso-positivos. Este trabalho tem o objetivo de apresentar os resultados de uma Revisão Sistemática da Literatura sobre a recuperação de dados digitais por meio de análise de ferramentas utilizadas nesse processo, bem como de técnicas e métodos usados no tratamento dos arquivos falso-positivos.

show abstract

“…Since data can be hidden, a lot of DF research goes into the finding and identification of data. These techniques involve file-carving to find deleted data [5,6], similarity hashes to identify files or parts of files [7,8], to name but two * * . Once data has been de-obfuscated, that is, their meaning can be readily inferred, an analysis on the content can be done which will contribute to the narrative.…”

Section: Digital Forensicsmentioning

confidence: 99%

Using Automated Keyword Extraction to Facilitate Team Discovery in a Digital Forensic Investigation of Electronic Communications

Staden

Poel

2017

SAIEE Afr. Res. J.

View full text Add to dashboard Cite

A major problem that often occurs in Digital Forensics (DF) is the huge volumes of data that has to be searched, filtered, and indexed to discover patterns that could lead to forensic evidence. The nature of, and the process by which the data gets collected, implies that the data also contain information about persons that are not implicated, or only incidentally involved in the crime under investigation. Privacy is therefore an important issue that needs to be managed in a DF investigation. This paper shows that techniques used in the Team Formation (TF) task can be successfully applied to address both the problems of data volume and privacy. The TF task can be re-formulated to fit the DF arena: to commit a crime, the culprit(s) may require the assistance of several other individuals, which implies that a team of some sort gets established. During a post-mortem DF analysis, an investigator may only have one, or a few names to start with. One of the key challenges is finding possible co-conspirators. From a TF point of view, the culprit is trying to find the best team to commit the crime, given some constraints. The TF task in DF requires the recording of skill-sets, and the generation and/or discovery of a graph depicting interaction between candidates. If the data consist of an email corpus and peoples' roles in an organisation (such as in the Enron data), both of these are readily available. In this paper we consider the TF problem in general and extend it to the DF arena by considering the information that an investigator may have access to during the investigation. We also show that simple information retrieval and keyword extraction techniques (such as RAKE) can be used to automatically discover potential teams from the data, while preserving privacy; results from a series of experiments (using the new definitions of TF and the proposed information retrieval techniques) on the Enron data is then presented.

show abstract

Systematic Literature Review on Data Carving in Digital Forensic

Cited by 24 publications

References 14 publications

Identifikasi dan Recovery File JPEG dengan Metode Signature-Based Carving dalam Model Automata

Identifikasi dan Recovery File JPEG dengan Metode Signature-Based Carving dalam Model Automata

Análise de Métodos para o Tratamento de Arquivos Falso-Positivos a partir de Ferramentas de Recuperação de Dados Digitais: Uma Revisão Sistemática da Literatura

Using Automated Keyword Extraction to Facilitate Team Discovery in a Digital Forensic Investigation of Electronic Communications

Contact Info

Product

Resources

About