An analysis of Ext4 for digital forensics

被引：57
|
作者：
Fairbanks, Kevin D. [1 ]
机构：
[1] Johns Hopkins Univ, Appl Phys Lab, Laurel, MD 20723 USA
来源：
DIGITAL INVESTIGATION | 2012年 / 9卷
关键词：
Ext4; File system forensics; Digital forensics; Extents; Flex block groups;
D O I：
10.1016/j.diin.2012.05.010
中图分类号：
TP [自动化技术、计算机技术];
学科分类号：
0812 ;
摘要：
This paper presents a low-level study and analysis of Ext4 file system data structures. It includes descriptions of extents, extent trees, directory indexing HTrees, and flex block groups. Currently, data about the file system is scattered with most sources focusing on one particular feature. This paper provides a more comprehensive analysis with the forensics community in mind and states some brief implications of the file system behavior with respect to data recovery. (c) 2012 The John Hopkins University, Applied Physics Laboratory. Published by Elsevier Ltd. All rights reserved.
引用
收藏
页码：S118 / S130
页数：13
相关论文
共 50 条
  • [1] Evolving Ext4 for Shingled Disks
    Aghayev, Abutalib
    Ts'o, Theodore
    Gibson, Garth
    Desnoyers, Peter
    [J]. PROCEEDINGS OF FAST '17: 15TH USENIX CONFERENCE ON FILE AND STORAGE TECHNOLOGIES, 2017, : 105 - 119
  • [2] Block and Inode Based Analysis on EXT4 File System
    Yudha, Fietyata
    Prayudi, Yudi
    [J]. ADVANCED SCIENCE LETTERS, 2018, 24 (01) : 652 - 655
  • [3] Anti-forensics in ext4: On secrecy and usability of timestamp-based data hiding
    Goebel, Thomas
    Baier, Harald
    [J]. DIGITAL INVESTIGATION, 2018, 24 : S111 - S120
  • [4] Performance Analysis of SSD write using TRIM in NTFS and EXT4
    Kim, Giryoung
    Shin, Dongkun
    [J]. 2011 6TH INTERNATIONAL CONFERENCE ON COMPUTER SCIENCES AND CONVERGENCE INFORMATION TECHNOLOGY (ICCIT), 2012, : 422 - 423
  • [5] AFEIC: Advanced forensic Ext4 inode carving
    Dewald, Andreas
    Seufert, Sabine
    [J]. DIGITAL INVESTIGATION, 2017, 20 : S83 - S91
  • [6] PerSeVerE: Persistency Semantics for Verification under Ext4
    Kokologiannakis, Michalis
    Kaysin, Ilya
    Raad, Azalea
    Vafeiadis, Viktor
    [J]. PROCEEDINGS OF THE ACM ON PROGRAMMING LANGUAGES-PACMPL, 2021, 5 (POPL):
  • [7] Guaranteeing the Metadata Update Atomicity in EXT4 File system
    Son, Seongbae
    Yoo, Jinsoo
    Won, Youjip
    [J]. PROCEEDINGS OF THE 8TH ASIA-PACIFIC WORKSHOP ON SYSTEMS (APSYS '17), 2017,
  • [8] Tuning the Ext4 Filesystem Performance for Android-Based Smartphones
    Kim, Hyeong-Jun
    Kim, Jin-Soo
    [J]. FRONTIERS IN COMPUTER EDUCATION, 2012, 133 : 745 - 752
  • [9] Adaptive Data Wiping Scheme with Adjustable Parameters for Ext4 File System
    Zhang Peng
    Niu Shaozhang
    Huang Zhenpeng
    Qin Xiaohua
    [J]. CHINESE JOURNAL OF ELECTRONICS, 2017, 26 (02) : 392 - 398
  • [10] LOCKED-Free Journaling: Improving the Coalescing Degree in EXT4 Journaling
    Koo, Kyoungho
    Park, Yongjun
    Won, Youjip
    [J]. 2020 9TH IEEE NON-VOLATILE MEMORY SYSTEMS AND APPLICATIONS SYMPOSIUM (NVMSA 2020), 2020, : 36 - 41
12345