Skip to main content
SpringerLink
Log in

File Recovery of High-Order Clearing First Cluster Based on FAT32

  • Conference paper
  • First Online:
Cyberspace Safety and Security (CSS 2019)

Part of the book series: Lecture Notes in Computer Science ((LNSC,volume 11982))

Included in the following conference series:

Abstract

The core technical problems of file recovery are the first cluster number clearing of high-order two bytes and the fragmentation in the file. The algorithm proposed in this paper makes full use of file system information such as FAT, creation time, file identification and fragmentation characteristics, recover easy ones and the files difficult to recover which are recoverable at first, and then analyzes the status of remaining fragments after eliminating many interference of fragments. Experimental results show that the algorithm can significantly reduce the complexity of fragments and improve the accuracy of file recovery.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Log in via an institution
Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 39.99
Price excludes VAT (USA)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD 54.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

References

  1. Liu, W.: In-Depth Disclosure of Data Recovery Technology, 2nd edn, pp. 248–257. Electronic Industry Press, Beijing (2016)

    Google Scholar 

  2. Guo, B., Youquan, M.: A computer forensics method based on FAT32 file system. Comput. Appl. Softw. 1, 260–262 (2010)

    Google Scholar 

  3. Windows 10 Operating system version of the latest market share data released (2019). http://notebook.it168.com/a2019/0131/5155/000005155901.shtml

  4. Yang, D.: Fast recovery method of effective data based on FAT32. J. Comput. Appl. 9, 2500–2503 (2012)

    Google Scholar 

  5. Fan, H., Lipeng, W.: Research on data recovery technology of FAT32 file system. Sci. Technol. Inf. 36, 55–57 (2013)

    Google Scholar 

  6. Hong, G.: Research on JPEG File Duplication Based on Thumbnail. Hangzhou Dianzi University (2012)

    Google Scholar 

  7. Dai, S., Tu, Y.: Data Recovery Technology (Classic Reproduction Version). Electronic Industry Press, Beijing (2014)

    Google Scholar 

  8. Tang, Y., et al.: Recovery of heavily fragmented JPEG files. Digit. Investig. 18, 108–117 (2016)

    Article  Google Scholar 

  9. Digital Assembly. Smart Carver (2015). http://digital-assembly.com/products/smartcarver-dc3/

  10. Garfinkel, S.L.: Carving contiguous and fragmented files with fast object validation. Digit. Investig. 4, 2–12 (2007)

    Article  Google Scholar 

  11. Guangyu, G., Shujuan, Z.: A file recovery method in a FAT32 file system. Netw. New Media Technol. 2, 36–41 (2016)

    Google Scholar 

Download references

Acknowledgements

This work is supported by Projects of Shandong Province Higher Educational Science and Technology Program under Grant J18KA357, J16LN19, J18KA383; Doctoral Research Fund of Shandong Jianzhu University under GrantXNBS1810; Teaching Innovation project of Shandong University of Political Science and Law under Grant 2017JYB009; projects of Shandong University of Political Science and Law, Grant No. 2016Z03B, 2015Z03B; and also supported (in part) by the Key Research and Development Project of Shandong Province under Grant 2019GGX101068.

Author information

Authors and Affiliations

  1. School of Cyber Security, Shandong University of Political Science and Law, Jinan, 250014, China

    Xu Chang, Jian Wu & Guorui Feng

  2. Key Laboratory of Evidence-Identifying in Universities of Shandong, Shandong University of Political Science and Law, Jinan, 250014, China

    Xu Chang, Fanchang Hao, Jian Wu & Guorui Feng

  3. School of Computer Science and Technology, Shandong Jianzhu University, Jinan, 250101, China

    Fanchang Hao

Authors
  1. Xu Chang
    View author publications

    You can also search for this author in PubMed Google Scholar

  2. Fanchang Hao
    View author publications

    You can also search for this author in PubMed Google Scholar

  3. Jian Wu
    View author publications

    You can also search for this author in PubMed Google Scholar

  4. Guorui Feng
    View author publications

    You can also search for this author in PubMed Google Scholar

Corresponding author

Correspondence to Xu Chang .

Editor information

Editors and Affiliations

  1. Rutgers University, Newark, NJ, USA

    Jaideep Vaidya

  2. Beihang University, Beijing, China

    Xiao Zhang

  3. Guangzhou University, Guangzhou, China

    Jin Li

Rights and permissions

Reprints and permissions

Copyright information

© 2019 Springer Nature Switzerland AG

About this paper

Check for updates. Verify currency and authenticity via CrossMark

Cite this paper

Chang, X., Hao, F., Wu, J., Feng, G. (2019). File Recovery of High-Order Clearing First Cluster Based on FAT32. In: Vaidya, J., Zhang, X., Li, J. (eds) Cyberspace Safety and Security. CSS 2019. Lecture Notes in Computer Science(), vol 11982. Springer, Cham. https://doi.org/10.1007/978-3-030-37337-5_38

Download citation

  • DOI: https://doi.org/10.1007/978-3-030-37337-5_38

  • Published:

  • Publisher Name: Springer, Cham

  • Print ISBN: 978-3-030-37336-8

  • Online ISBN: 978-3-030-37337-5

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics

Search

Navigation