Memory fragment file carving algorithm based on the reverse of the structure chain

To address the extraction of document evidence for doc, pdf, and other common file types in the memory image, the model of fragment file carving based on memory image was proposed.Then, on the basis of the model, the fragment file carving algorithm based on the reverse of file object structure chain...

Descrición completa

Detalles Bibliográficos

Principais autores:	Binglong LI, Zhenyu ZHOU, Yu ZHANG, Heyu ZHANG, Chaowen CHANG
Formato:	Artigo
Idioma:	Chinês
Publicado:	Editorial Department of Journal on Communications 2021-07-01
Series:	Tongxin xuebao
Assuntos:	file carving;memory forensics;memory fragment;fragment adjacent;structure reverse
Acceso en liña:	http://www.joconline.com.cn/thesisDetails#10.11959/j.issn.1000-436x.2021143
Tags:	Engadir etiqueta Sen Etiquetas, Sexa o primeiro en etiquetar este rexistro!