Difference between revisions of "File Carving Bibliography"

From ForensicsWiki
Jump to: navigation, search
m (Basic Techniques)
(Fragment Recovery Carving)
 
(17 intermediate revisions by 2 users not shown)
Line 1: Line 1:
==File Carving Bibliography==
 
 
'''In chronological order, oldest to most recent'''
 
'''In chronological order, oldest to most recent'''
 
===Basic Techniques===
 
===Basic Techniques===
  
<bibtex>
+
[http://handle.dtic.mil/100.2/ADA432468 An analysis of disc carving techniques], Mikus, Nicholas A. " Master's Thesis, Naval Postgraduate School. March 2005.
@INPROCEEDINGS{Shanmugasundaram02automaticreassembly,
+
    author = {Kulesh Shanmugasundaram},
+
    title = {Automatic Reassembly of Document Fragments via Data Compression},
+
    booktitle = {Presented at the 2nd Digital Forensics Research Workshop},
+
    year = {2002},
+
    pages = {152--159}
+
}
+
</bibtex>
+
  
Mikus, Nicholas A. "An analysis of disc carving techniques," Master's Thesis, Naval Postgraduate School. March 2005. http://handle.dtic.mil/100.2/ADA432468
+
[http://www.dfrws.org/2005/proceedings/richard_scalpel.pdf Scalpel: A Frugal, High Performance File Carver], Golden G. Richard and Vassil Roussev, DFRWS 2005
  
Garfinkel, S., "Carving Contiguous and Fragmented Files with Fast Object Validation", Digital Forensics Workshop (DFRWS 2007), Pittsburgh, PA, August 2007. http://www.simson.net/clips/academic/2007.DFRWS.pdf
+
[http://www.dfrws.org/2007/proceedings/p73-marziale.pdf Massive threading: Using GPUs to increase the performance of digital forensics tools], Lodovico Marziale, Golden G. Richard III*, Vassil Roussev, DFRWS 2007.
 +
 
 +
===Fragment Recovery Carving===
 +
 
 +
Automatic Reassembly of Document Fragments via Data Compression, Kulesh Shanmugasundaram and Nasir Memon, Presented at DFRWS, 2002.
 +
 
 +
[http://digital-assembly.com/technology/research/pubs/acsac-2003.pdf Automatic Reassembly of Document Fragments via Context Based Statistical Models]
 +
Kulesh Shanmugasundaram and Nasir Memon, Annual Computer Security Applications Conference, 2003.
 +
 
 +
[http://isis.poly.edu/kulesh/research/pubs/icassp-2003.pdf Automated Reassembly of Fragmented Images], Anandabrata Pal, Kulesh Shanmugasundaram, Nasir Memon, Proceedings of the IEEE International Conference on Acoustics, Speech, and Signal Processing, 2003.
 +
 
 +
[http://www.simson.net/clips/academic/2007.DFRWS.pdf Carving Contiguous and Fragmented Files with Fast Object Validation], Simson Garfinkel, Digital Forensics Workshop (DFRWS 2007), Pittsburgh, PA, August 2007.
 +
 
 +
[http://digital-assembly.com/technology/research/pubs/ieee-trans-2006.pdf Automated Reassembly of File Fragmented Images Using Greedy Algorithms],
 +
Anandabrata Pal and Nasir Memon, IEEE Trans. Image Processing, Feb. 2006.
 +
 
 +
[http://www.cs.uno.edu/~golden/Stuff/ifip2007-final.pdf In-Place File Carving], Golden G. Richard III, Vassil Roussev, and Lodovico Marziale, IFIP WG 11.9, Advances in Digital Forensics, 2007.
 +
 
 +
Reassembly of Fragmented JPEG Images Containing Restart Markers, Martin Karresand , Nahid Shahmehri , European Conference on Computer Network Defense EC2ND in cooperation with ENISA ( 2008 : Dublin, Ireland ) , s. 25 - 32 Los Alamitos, CA, USA : IEEE Computer Society, 2008.
 +
 
 +
Completing the Picture: Fragments and Back Again, Martin Karresand, Linköping : Linköpings universitet, 2008, 111 s.
 +
Linköping studies in science and technology. Thesis, ISBN: 978-91-7393-915-7
 +
 
 +
[http://www.dfrws.org/2008/proceedings/p2-pal.pdf Detecting File Fragmentation Point Using Sequential Hypothesis Testing]. Anandabrata Pal, Husrev Sencar, Nasir Memon, DFRWS, 2008. [http://www.dfrws.org/2008/proceedings/p2-pal_pres.pdf [slides]]
 +
 
 +
[http://www.dfrws.org/2009/proceedings/p88-sencar.pdf Identification and Recovery of JPEG Files with Missing Fragments]. Husrev Sencar and Nasir Memon. DFRWS, 2009.
 +
 
 +
[http://digital-assembly.com/technology/research/pubs/ieee-spm-2009.pdf The Evolution of File Carving]. Anandabrata Pal and Nasir Memon.
 +
IEEE Signal Processing Magazine, Volume: 26, Issue 2. March 2009.
  
 
===Sector Discrimination===
 
===Sector Discrimination===
Line 35: Line 54:
 
}
 
}
 
</bibtex>
 
</bibtex>
 +
 +
==Evaluations==
 +
[[Media:kloet_2007.pdf|Measuring and Improving the Quality of File Carving Methods]], S.J.J. Kloet , Master's thesis, Eindhoven University of Technology, August 2007
  
 
[[Category:Bibliographies]]
 
[[Category:Bibliographies]]
 +
[[Category:File Carving]]
 +
==See also==
 +
[[File Carving]]

Latest revision as of 04:58, 27 October 2009

In chronological order, oldest to most recent

Basic Techniques

An analysis of disc carving techniques, Mikus, Nicholas A. " Master's Thesis, Naval Postgraduate School. March 2005.

Scalpel: A Frugal, High Performance File Carver, Golden G. Richard and Vassil Roussev, DFRWS 2005

Massive threading: Using GPUs to increase the performance of digital forensics tools, Lodovico Marziale, Golden G. Richard III*, Vassil Roussev, DFRWS 2007.

Fragment Recovery Carving

Automatic Reassembly of Document Fragments via Data Compression, Kulesh Shanmugasundaram and Nasir Memon, Presented at DFRWS, 2002.

Automatic Reassembly of Document Fragments via Context Based Statistical Models Kulesh Shanmugasundaram and Nasir Memon, Annual Computer Security Applications Conference, 2003.

Automated Reassembly of Fragmented Images, Anandabrata Pal, Kulesh Shanmugasundaram, Nasir Memon, Proceedings of the IEEE International Conference on Acoustics, Speech, and Signal Processing, 2003.

Carving Contiguous and Fragmented Files with Fast Object Validation, Simson Garfinkel, Digital Forensics Workshop (DFRWS 2007), Pittsburgh, PA, August 2007.

Automated Reassembly of File Fragmented Images Using Greedy Algorithms, Anandabrata Pal and Nasir Memon, IEEE Trans. Image Processing, Feb. 2006.

In-Place File Carving, Golden G. Richard III, Vassil Roussev, and Lodovico Marziale, IFIP WG 11.9, Advances in Digital Forensics, 2007.

Reassembly of Fragmented JPEG Images Containing Restart Markers, Martin Karresand , Nahid Shahmehri , European Conference on Computer Network Defense EC2ND in cooperation with ENISA ( 2008 : Dublin, Ireland ) , s. 25 - 32 Los Alamitos, CA, USA : IEEE Computer Society, 2008.

Completing the Picture: Fragments and Back Again, Martin Karresand, Linköping : Linköpings universitet, 2008, 111 s. Linköping studies in science and technology. Thesis, ISBN: 978-91-7393-915-7

Detecting File Fragmentation Point Using Sequential Hypothesis Testing. Anandabrata Pal, Husrev Sencar, Nasir Memon, DFRWS, 2008. [slides]

Identification and Recovery of JPEG Files with Missing Fragments. Husrev Sencar and Nasir Memon. DFRWS, 2009.

The Evolution of File Carving. Anandabrata Pal and Nasir Memon. IEEE Signal Processing Magazine, Volume: 26, Issue 2. March 2009.

Sector Discrimination

Yoginder Singh Dandass, Nathan Joseph Necaise, Sherry Reede Thomas - An Empirical Analysis of Disk Sector Hashes for Data Carving
2:95--106,2008
http://www.informaworld.com/10.1080/15567280802050436
Bibtex
Author : Yoginder Singh Dandass, Nathan Joseph Necaise, Sherry Reede Thomas
Title : An Empirical Analysis of Disk Sector Hashes for Data Carving
In : -
Address :
Date : 2008

Evaluations

Measuring and Improving the Quality of File Carving Methods, S.J.J. Kloet , Master's thesis, Eindhoven University of Technology, August 2007

See also

File Carving