Difference between pages "File Systems" and "Hacking BootCamp for Investigators"

From Forensics Wiki
(Difference between pages)
Redirect page
Jump to: navigation, search
m
 
 
Line 1: Line 1:
= Conventional File Systems =
+
#REDIRECT [[Hacking BootCamp: Exploits and Live Incident Investigation]]
 
+
; [[ext2]], [[ext3]]
+
: ext2 was introduced with [[Linux]]. ext3 is a journaled version of ext2 which allows for speedy disk recovery after a crash.
+
 
+
; [[FAT]]
+
: Originally used by [[MS-DOS]]. Includes [[FAT12]] (for floppy disks), [[FAT16]] and [[FAT32]].
+
 
+
; [[ffs]]
+
: The '''Fast File System''' used by some BSD versions of [[UNIX]] and from which [[UFS]] was derived supporting faster disk access and [[symbolic link]]s like ffs.
+
 
+
; [[HFS]]
+
: Used by [[Apple]] systems, it has been succeed by [[HFS+]].
+
 
+
; [[JFS]]
+
: IBM's Journaled File System introduced with their flavor of UNIX (AIX)
+
 
+
; [[NTFS]]
+
: The '''New Technology File System''', introduced by [[Microsoft]] with [[Windows NT]] 4.0. Now used on [[Windows XP]].
+
 
+
; [[reiserfs]]
+
: A journaling filesystem for Linux.
+
 
+
; [[UFS]]
+
: The '''Unix File System''', introduced with [[UNIX]].
+
 
+
; [[XFS]]
+
: [[SGI]]’s high performance journaling filesystem that originated on their [[IRIX]] (flavor of [[UNIX]]) platform. XFS supports variable blocking sizes, is extent based, and makes extensive use of [[Btree]]s to facilitate both performance and scalability. Additionally, support is also provided for real-time environments.
+
 
+
= Cryptographic File Systems =
+
 
+
'''Cryptographic file systems,''' also known as encrypted file systems, encrypt information before it is stored on the media. Some of these file systems store encrypted files directly. Others are better thought of as device drivers, which are then used to store some of the file systems discussed above.
+
 
+
; [[File Vault]]
+
: A clever user interface to [[Apple]]'s encrypted disk images. Uses the ".sparseimage" extension on disk files.
+
 
+
; [[CFS]]
+
: Matt Blaze's '''Cryptographic File System''' for [[Unix]].
+
: [http://www.crypto.com/papers/cfskey.pdf Key Management in an Encrypting File System], Matt Blaze, USENIX Summer 1994 Technical Conference, Boston, MA, June 1994.
+
: [http://www.crypto.com/papers/cfs.pdf A Cryptographic File System for Unix], Matt Blaze, Proceedings of the First ACM Conference on Computer and Communications Security, Fairfax, VA, November 1993.
+
 
+
; [[Windows Encrypted File System |EFS]]
+
: EFS is the Encrypted File System built into versions of Microsoft Windows.
+
 
+
; [[NCryptfs]]
+
: [http://www.fsl.cs.sunysb.edu/docs/ncryptfs/ncryptfs.pdf NCryptfs: A Secure and Convenient Cryptographic File System], Charles P. Wright, Michael C. Martino, and Erez Zadok, Stony Brook University, USENIX 2003 Annual Technical Conference.
+
 
+
; [[TCFS]]
+
: '''Transparent Cryptographic File System'''.
+
: http://www.tcfs.it/
+
: http://www.tcfs.it/docs/tcfs.ps
+
 
+
; [[SFS]]
+
: '''Secure File System'''.
+
: http://atrey.karlin.mff.cuni.cz/~rebel/sfs/
+
 
+
See also [[Full Disk Encryption]], which are disk- or applicance-based cryptographic file systems.
+
 
+
= External Links =
+
 
+
* http://en.wikipedia.org/wiki/File_system
+
* http://en.wikipedia.org/wiki/List_of_file_systems
+
* http://en.wikipedia.org/wiki/Comparison_of_file_systems
+

Latest revision as of 13:42, 6 October 2009