Difference between revisions of "File Carving Bibliography"

From ForensicsWiki
Jump to: navigation, search
m
m (Fragment Recovery Carving)
Line 27: Line 27:
  
 
[http://www.dfrws.org/2008/proceedings/p2-pal.pdf Detecting File Fragmentation Point Using Sequential Hypothesis Testing]. Anandabrata Pal, Husrev Sencar, Nasir Memon, DFRWS, 2007. [http://www.dfrws.org/2008/proceedings/p2-pal_pres.pdf [slides]]
 
[http://www.dfrws.org/2008/proceedings/p2-pal.pdf Detecting File Fragmentation Point Using Sequential Hypothesis Testing]. Anandabrata Pal, Husrev Sencar, Nasir Memon, DFRWS, 2007. [http://www.dfrws.org/2008/proceedings/p2-pal_pres.pdf [slides]]
 +
 +
Reassembly of Fragmented JPEG Images Containing Restart Markers, Martin Karresand , Nahid Shahmehri , European Conference on Computer Network Defense EC2ND in cooperation with ENISA ( 2008 : Dublin, Ireland ) , s. 25 - 32 Los Alamitos, CA, USA : IEEE Computer Society, 2008
 +
 +
Completing the Picture: Fragments and Back Again, Martin Karresand, Linköping : Linköpings universitet, 2008, 111 s.
 +
Linköping studies in science and technology. Thesis, ISBN: 978-91-7393-915-7
  
 
===Sector Discrimination===
 
===Sector Discrimination===

Revision as of 04:19, 14 January 2009

In chronological order, oldest to most recent

Basic Techniques

An analysis of disc carving techniques, Mikus, Nicholas A. " Master's Thesis, Naval Postgraduate School. March 2005.

Scalpel: A Frugal, High Performance File Carver, Golden G. Richard and Vassil Roussev, DFRWS 2005

Massive threading: Using GPUs to increase the performance of digital forensics tools, Lodovico Marziale, Golden G. Richard III*, Vassil Roussev, DFRWS 2007.

Fragment Recovery Carving

Kulesh Shanmugasundaram - Automatic Reassembly of Document Fragments via Data Compression
Presented at the 2nd Digital Forensics Research Workshop pp. 152--159,2002
Bibtex
Author : Kulesh Shanmugasundaram
Title : Automatic Reassembly of Document Fragments via Data Compression
In : Presented at the 2nd Digital Forensics Research Workshop -
Address :
Date : 2002

Automated Reassembly of Fragmented Images, Anandabrata Pal, Kulesh Shanmugasundaram, Nasir Memon, Proceedings of the IEEE International Conference on Acoustics, Speech, and Signal Processing, 2003.

"Carving Contiguous and Fragmented Files with Fast Object Validation", Garfinkel, S.,, Digital Forensics Workshop (DFRWS 2007), Pittsburgh, PA, August 2007.

In-Place File Carving, Golden G. Richard III, Vassil Roussev, and Lodovico Marziale, IFIP WG 11.9, Advances in Digital Forensics, 2007

Detecting File Fragmentation Point Using Sequential Hypothesis Testing. Anandabrata Pal, Husrev Sencar, Nasir Memon, DFRWS, 2007. [slides]

Reassembly of Fragmented JPEG Images Containing Restart Markers, Martin Karresand , Nahid Shahmehri , European Conference on Computer Network Defense EC2ND in cooperation with ENISA ( 2008 : Dublin, Ireland ) , s. 25 - 32 Los Alamitos, CA, USA : IEEE Computer Society, 2008

Completing the Picture: Fragments and Back Again, Martin Karresand, Linköping : Linköpings universitet, 2008, 111 s. Linköping studies in science and technology. Thesis, ISBN: 978-91-7393-915-7

Sector Discrimination

Yoginder Singh Dandass, Nathan Joseph Necaise, Sherry Reede Thomas - An Empirical Analysis of Disk Sector Hashes for Data Carving
2:95--106,2008
http://www.informaworld.com/10.1080/15567280802050436
Bibtex
Author : Yoginder Singh Dandass, Nathan Joseph Necaise, Sherry Reede Thomas
Title : An Empirical Analysis of Disk Sector Hashes for Data Carving
In : -
Address :
Date : 2008

Evaluations

Measuring and Improving the Quality of File Carving Methods, S.J.J. Kloet , Master's thesis, Eindhoven University of Technology, August 2007

See also

File Carving